Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: 3iPdLDMViyCz4pSNNseYeq2qByzNCo/8ofGbm4eLgHU=
Subject key identifier: AD:44:F0:6F:72:46:63:19:04:83:93:A3:1F:01:C5:75:22:3E:2C:95
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019D26CD2CB3C2B5FE99153249CD52F584A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 16AA
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: nNEx/KvNS/SrxYnWCHulSpCx0D2uAF0nLN+fwU7RTw4=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2c:b3:c2:b5:fe:99:15:32:49:cd:52:f5:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=ad44f06f72466319048393a31f01c575223e2c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:67:0e:07:f1:e3:ba:e8:2c:10:12:d4:56:
5d:e2:4e:a5:94:a8:53:b6:d3:a0:99:9c:42:ee:ee:
02:72:13:f9:1f:ae:25:fc:36:14:a7:c3:29:3c:1e:
99:2f:e6:2c:b8:bf:dc:45:98:1a:e7:66:22:a6:4b:
db:f7:53:6b:f8:cc:86:0d:4f:11:54:de:16:de:8d:
ee:f8:c3:18:0c:f0:70:02:0b:29:bb:69:93:b8:8e:
1d:38:76:c2:52:0d:dc:df:75:03:10:aa:38:ed:e5:
68:fa:18:ef:d3:10:9f:4b:76:34:07:9d:8d:a2:65:
eb:f5:6c:f9:bb:3b:62:b5:80:a3:c3:07:f6:7f:c9:
77:4d:a9:63:08:39:15:f5:8f:02:57:ba:d9:94:9c:
41:e6:79:14:8f:06:bc:ac:05:b7:6e:0c:2b:8d:29:
e7:79:6d:ee:c1:f5:6f:29:fe:98:fa:18:1e:33:f5:
93:17:a6:35:91:ac:b5:ff:9f:f0:5a:26:df:36:a3:
15:68:d4:12:6d:ba:ff:bb:95:40:59:f1:cb:6e:36:
8c:8d:ce:50:78:91:c0:98:6c:93:66:1f:5d:b4:6f:
29:ab:9b:cf:6a:e4:76:6f:4f:a9:cf:f7:29:8c:ed:
4e:f7:5e:a3:31:f4:10:9b:9b:d1:c8:7d:fe:dd:e2:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:F0:6F:72:46:63:19:04:83:93:A3:1F:01:C5:75:22:3E:2C:95
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:75:df:4d:85:1e:79:5f:c8:09:91:4e:99:03:9b:91:7d:
13:55:b6:7f:c7:9c:da:f5:98:17:5f:1d:4a:cb:68:f3:7b:4d:
52:32:76:73:db:9e:72:b5:be:05:1b:2e:40:a4:9a:a2:c5:f3:
d1:fb:b7:cf:3a:64:67:9b:ba:13:d2:0f:d1:7c:de:a6:98:30:
e8:30:6a:5a:60:fe:1f:6b:4b:3e:f2:20:e4:1b:53:71:e2:ee:
34:02:a7:d2:4e:c7:3c:87:cf:51:36:53:98:09:d9:3f:3d:2d:
91:6e:5d:66:6b:35:ee:6f:5c:6a:0e:c4:36:7f:c0:07:e9:be:
4c:5e:39:58:dc:e1:6f:e7:da:f4:d7:27:90:4f:38:37:d0:08:
2b:16:66:69:31:c2:76:ea:95:e8:52:ed:80:d3:3f:5e:15:a2:
75:c1:d4:5b:6d:3a:8d:d1:51:22:85:c1:15:8a:49:dd:a9:4b:
fb:f9:68:78:8b:84:e2:65:4f:5c:5c:e9:63:82:46:f2:fa:0a:
3f:43:f6:37:8f:08:a0:2a:a1:e4:f5:f2:86:54:c6:40:f3:5a:
0d:e7:63:4b:64:5a:39:c1:45:ac:5a:77:64:9c:b6:dc:7e:cc:
10:9e:20:ea:86:50:d1:80:35:2c:c1:54:03:a4:45:52:37:fc:
69:2e:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:44 2026 by rpki-client