Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: /RHVJy8NTHGgB9CufB+ggoHNil6j0sFBjI27O9CqtWo=
Subject key identifier: F2:41:06:92:3F:E1:5A:D7:00:FD:41:F3:00:82:5B:77:EE:10:26:43
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019D2884C261F46CE4221075FE0F797628C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 17C8
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: kvHnq9RcKmGIrwawoc5uXnrXNO5o5SAA+g6MblgDFhk=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c2:61:f4:6c:e4:22:10:75:fe:0f:79:76:28:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=f24106923fe15ad700fd41f300825b77ee102643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:e1:92:de:60:e6:23:db:40:fb:e5:66:3d:
22:0e:d1:f1:e7:8d:79:09:58:b2:6f:ec:70:7c:1a:
f6:0d:55:f6:5e:78:21:0f:4b:6d:1b:e6:af:c2:27:
08:74:82:a6:83:df:3a:ca:fb:8a:98:55:e2:43:0e:
2d:87:bf:03:36:07:8a:33:23:49:e6:f4:2f:2d:a8:
7e:b6:b5:aa:7b:0b:c5:5f:10:e3:83:60:9e:0c:b1:
ad:f9:85:0f:9a:cb:81:64:2d:78:4d:03:4b:f7:3f:
4b:0e:e8:8e:0f:64:f0:a9:07:9d:f8:50:bd:3b:46:
e7:92:c9:72:44:44:64:fe:6a:df:32:05:62:34:59:
a2:67:b9:c2:08:5e:82:5b:ba:b3:52:31:cf:bb:95:
f6:7a:9e:e0:74:a2:f2:34:50:6c:82:15:89:41:e7:
ce:90:47:d1:29:4b:e1:a5:e0:af:fe:d0:16:a4:ea:
45:ee:a0:7e:3b:78:fa:cf:89:52:20:59:c7:26:af:
87:4b:0d:e2:17:c0:16:80:5d:46:66:39:5e:b7:ef:
76:7f:88:f5:98:89:c1:bf:c6:3d:81:b2:1a:46:21:
1a:02:9a:8d:ae:e1:41:55:66:59:00:c6:a7:b0:fc:
b9:d2:0e:58:fa:4b:77:7b:f7:82:b8:49:da:0b:2f:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:06:92:3F:E1:5A:D7:00:FD:41:F3:00:82:5B:77:EE:10:26:43
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:37:86:20:4e:f3:00:77:7c:51:dc:c6:59:05:ad:0c:f6:5c:
90:cd:1a:39:5d:d1:51:b4:95:c7:f6:0c:11:1a:b9:c7:55:16:
1e:cd:0b:84:12:61:07:63:61:8d:cd:e3:1e:51:fc:ed:ad:73:
0d:a7:8d:07:b3:c5:a3:68:25:4e:59:4b:6e:64:b8:f1:26:f0:
d4:ab:35:9a:50:8f:9f:2c:d2:c8:0c:25:f0:4c:8f:de:5e:08:
16:98:2d:5a:2b:2f:4f:b3:9f:e8:60:76:88:50:4a:c0:a8:c3:
da:4d:75:4c:2a:ed:0f:c7:4b:2c:a2:63:6c:52:e3:f0:d5:40:
57:74:26:ac:29:4b:6b:64:d4:47:9d:74:a0:7e:cd:b9:5b:33:
7e:76:31:29:fd:e7:1f:4b:4e:a2:63:39:f4:08:35:c1:82:f3:
12:ed:60:07:c6:35:67:16:25:cf:94:0a:7d:43:03:47:54:5f:
8a:68:0b:8b:81:e7:94:b5:a0:58:96:6c:43:e3:db:e6:bb:10:
d1:35:77:1f:b3:27:d3:0d:36:5f:0f:42:81:34:6a:99:32:c8:
f1:76:ab:8e:e2:9c:80:4d:c3:a0:c8:4f:d0:ad:51:0a:c0:a7:
7e:b0:e5:a1:a8:b3:18:e6:ad:39:a4:70:06:4f:73:be:3b:f4:
d7:53:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:57 2026 by rpki-client