Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: dPsJjaHo5m5SgSYZKAuLrqqrCfHQPSM2IBBv6XZYHyI=
Subject key identifier: B1:32:21:86:8E:6C:C4:52:86:B3:F7:22:57:9D:98:00:FF:6D:E5:94
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019D2771C04E8C9CE7ECB5648861D14C9E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0FC2
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: y3o7vOclSia5kMokR6JAIeRPbXwqPfyvEIXrSNoY5k4=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c0:4e:8c:9c:e7:ec:b5:64:88:61:d1:4c:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=b13221868e6cc45286b3f722579d9800ff6de594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:59:1c:50:bc:a2:70:79:e6:b6:fc:9c:03:
0e:c3:63:f0:3e:1f:b9:71:96:43:38:89:74:33:78:
47:34:56:3f:a7:f2:cf:c3:1f:f6:9e:28:e1:1a:01:
41:0d:9e:8b:2d:18:35:47:0c:f3:b2:59:63:f1:e5:
d6:e5:22:fa:19:94:10:67:af:5c:db:35:02:92:9e:
67:9b:d3:60:8c:85:df:f0:cf:89:de:5e:b9:52:21:
7e:3c:9e:21:1c:2e:f0:de:1f:60:0c:bb:c1:39:78:
ff:53:13:8d:25:e5:83:13:90:94:ed:23:6b:71:79:
e0:66:14:44:44:75:4f:cd:05:31:44:7f:e8:ec:f5:
d9:5e:85:41:c6:53:5c:fd:32:b1:ad:20:e2:25:a6:
0c:f7:75:97:36:70:f8:e9:e5:bf:1d:81:a2:70:39:
d7:bc:d1:e6:db:a1:a0:39:f0:61:33:c8:2b:25:88:
06:a5:b9:fb:13:32:d4:c9:9f:f5:98:44:40:33:94:
0e:f0:36:9f:f5:67:49:6b:46:04:60:25:ea:b3:c5:
a1:3a:6c:fd:28:82:53:bc:80:8f:30:7d:24:10:9f:
cb:a1:03:b0:98:e4:15:be:c5:f8:5b:36:e0:72:02:
47:f4:56:2b:2a:7b:f8:69:3f:d6:85:18:80:58:84:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:21:86:8E:6C:C4:52:86:B3:F7:22:57:9D:98:00:FF:6D:E5:94
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:aa:d1:a7:df:32:f6:a2:9b:60:aa:f8:c1:d8:f3:ae:a3:
7f:49:3b:c1:94:5b:af:65:46:41:87:d4:b5:f9:c9:b7:64:ee:
7c:a7:d6:6d:d1:84:dc:58:c7:01:60:2c:d7:73:0f:e1:7d:df:
7e:6b:a4:79:21:4b:6f:30:05:17:4d:81:54:7f:53:6e:1f:a6:
a2:74:c8:89:3b:08:ac:e9:ae:0f:6a:38:7f:48:4a:d4:5e:4d:
a2:11:d1:54:c3:d3:93:bc:3c:1d:b5:19:ce:f6:2e:27:2a:63:
2f:af:a9:72:62:ec:04:2c:77:ed:57:36:0e:50:7e:dd:2e:78:
ef:b7:dc:c7:7b:58:11:2e:37:74:0c:26:55:d5:18:c1:ee:52:
d3:54:4f:6d:f0:08:25:c4:f0:48:07:46:fa:77:d1:e5:24:11:
61:20:ab:ac:b0:88:68:d0:9b:2a:38:24:53:52:3e:83:d5:05:
5d:5f:75:63:50:17:f0:b8:ac:eb:4d:5c:26:32:41:94:d8:1c:
64:4e:4a:3f:c5:c3:f5:69:ef:3c:c2:08:92:b4:48:4c:2c:15:
b8:49:38:3c:4f:bf:c4:69:e5:9d:2f:a0:5f:35:8d:61:77:db:
c3:28:01:c9:fb:9c:50:3f:ae:7f:36:00:72:f5:d2:af:2e:38:
b1:60:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:21 2026 by rpki-client