Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: wrs2LMqYdvIKcPu+2CXFADSWHPa7M9vauVW/UhflX9I=
Subject key identifier: 15:F7:2E:48:5D:CB:3A:AD:49:E8:7B:64:7A:7C:B3:11:20:CA:94:E5
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019D2628234A77F528F4A2C5D6005401D2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: f9w548jD1w4LemHoS1vinKml3waRyA8hK3e7/1BaoeQ=)
2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:23:4a:77:f5:28:f4:a2:c5:d6:00:54:01:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=15f72e485dcb3aad49e87b647a7cb31120ca94e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:57:6f:f9:8e:6b:d0:77:67:ff:26:fb:49:
21:83:48:16:63:54:d7:c0:15:f7:57:77:f6:10:44:
3b:10:c2:98:9e:94:c6:64:31:4d:13:a0:de:61:e0:
f7:f9:35:52:77:81:d2:b2:aa:ec:d4:9c:e9:84:bc:
ae:e2:2f:63:28:b3:83:89:69:51:78:38:51:b3:89:
5c:16:b1:41:24:28:b7:b8:e0:0a:42:96:65:b2:5c:
71:ea:36:99:4a:81:59:40:d4:97:f6:f2:95:11:ec:
7f:6c:a1:a2:1c:78:4b:1e:af:bc:e6:10:f1:f8:8a:
52:c7:62:b9:17:12:ae:5b:6f:eb:ef:02:f3:b8:8a:
18:da:fb:79:be:bd:21:7b:c3:62:10:d9:08:10:dd:
2d:ec:6a:f8:84:9b:70:ab:d4:9d:69:b7:49:2d:48:
8d:16:90:e0:92:26:20:7c:30:c8:55:74:8a:20:a6:
c1:d3:7d:56:b0:0c:f2:17:20:19:32:41:c2:3c:0a:
86:6f:d2:76:e4:e8:89:2d:33:15:cd:02:ae:47:bf:
b4:36:27:c7:30:71:37:33:40:00:6c:44:41:a5:ec:
bf:59:7a:f5:4a:21:f1:dd:f8:02:4d:e8:79:32:ac:
de:96:7e:34:7f:f2:91:e2:8f:80:10:12:b4:ed:af:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:2E:48:5D:CB:3A:AD:49:E8:7B:64:7A:7C:B3:11:20:CA:94:E5
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3e:ed:66:1b:ef:7b:cc:4c:1d:b1:e4:14:34:25:ed:ff:e6:
82:a3:58:8b:90:7c:88:f4:63:67:90:94:03:1c:af:76:c5:71:
02:63:ac:4b:43:a7:a2:f2:c4:ca:37:70:5b:d0:3c:cb:cb:b8:
8d:13:98:d6:c6:52:7d:49:82:4d:ee:32:c1:99:a3:e0:83:cc:
af:d1:a3:f4:a6:08:f1:13:26:a3:bc:aa:6b:75:f1:cb:92:52:
6c:e8:fd:fc:6d:59:dd:0e:b6:f9:8e:d7:29:a2:5b:cd:7a:e6:
a9:7d:34:fc:9e:b5:66:71:d3:70:3b:8e:d2:00:11:5c:4b:e2:
80:e6:7e:6e:d8:92:50:b4:9a:93:6a:de:47:3f:23:f6:ec:44:
1c:31:d6:6d:51:72:33:95:43:4f:f2:5b:69:48:ce:2f:14:3c:
cb:4c:4e:36:c4:18:13:20:4d:d0:de:f4:4a:f4:d4:b8:35:a6:
71:df:f3:2b:6a:ff:18:eb:76:68:78:2f:2d:02:c6:ab:eb:f7:
96:f8:9d:4b:1b:93:60:0d:ca:67:68:61:bb:1b:ed:25:94:85:
00:93:ab:5c:20:96:31:95:21:5e:71:d8:43:ac:9a:9c:d7:68:
34:23:be:37:9b:6a:d7:78:f0:66:63:a1:8e:90:de:15:6b:16:
d2:c5:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:33 2026 by rpki-client