Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: 95osniHWMzgPXoDUiIyG41NIobaNWd5qWLxhfWmtvMU=
Subject key identifier: 27:4D:6F:AC:7B:CA:AE:98:A0:B2:45:61:68:EC:DD:49:42:10:60:4F
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 019D27E017F2CDDDE33D2513865C18AB25B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 09C2
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: 2uip+c087GjdtVeEMYRPz7YAYKI2/mCno9Mfu+52zVI=)
2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:17:f2:cd:dd:e3:3d:25:13:86:5c:18:ab:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=274d6fac7bcaae98a0b2456168ecdd494210604f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:40:84:10:67:ae:88:b3:c9:52:5f:31:a7:
0b:b6:ca:37:f7:98:ae:b3:fc:f5:bd:61:7a:45:b6:
6c:d5:e1:0b:64:0c:24:03:53:ef:b7:5c:ef:69:2c:
db:25:8f:3c:1e:94:d4:cf:66:04:69:1d:cb:8c:25:
71:0a:7b:fe:2a:2f:7a:1d:fc:5f:91:52:77:da:4d:
6e:cd:09:bc:12:ff:ca:b9:0a:6c:cf:6c:d1:57:bb:
93:4e:ed:01:1e:6f:d6:fa:18:3d:3a:01:07:76:e0:
dc:df:4e:49:82:34:98:18:fb:65:c2:48:03:6f:5b:
1f:53:81:52:16:eb:e5:44:75:79:2f:6a:00:07:a0:
a3:c1:b9:e0:8b:69:17:61:25:b6:31:c1:b8:d4:aa:
15:a2:1c:15:0f:f3:77:10:aa:66:2f:5b:2e:ce:08:
a8:ac:c8:40:8e:4f:de:9f:38:6e:93:33:64:15:0b:
b5:8a:4b:72:b9:af:ca:88:65:aa:ea:d0:0d:a9:f9:
19:80:4f:fa:96:41:44:60:bd:dc:4c:12:a8:51:e0:
b3:3a:b6:3f:6a:80:72:ae:22:38:a6:f4:95:67:09:
77:2d:ac:56:ab:82:79:ff:0d:0e:9b:d6:6a:ed:b7:
8b:71:fe:43:ea:2e:e3:7a:43:b5:81:54:39:02:b4:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4D:6F:AC:7B:CA:AE:98:A0:B2:45:61:68:EC:DD:49:42:10:60:4F
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:5a:aa:04:ab:9c:5e:bd:bc:fd:92:2a:ff:56:b5:d5:72:
74:ec:88:9d:65:61:21:af:42:34:1a:28:2c:88:ef:88:0f:9d:
aa:b0:54:4b:2a:88:5a:83:21:8a:42:88:a6:86:ce:96:3e:24:
2b:53:31:5d:df:6c:79:0f:16:94:43:39:0e:b2:9e:52:bc:cf:
a5:2d:32:e5:56:bb:27:32:a8:0f:c6:9d:7a:db:b1:40:60:84:
39:1f:26:48:dd:11:6f:cf:75:28:94:29:18:a7:3a:a7:88:33:
20:8e:a5:16:5c:1c:80:81:d6:71:7d:8a:9f:72:56:63:25:7e:
44:b1:c5:d6:17:35:c7:ac:d7:e1:5c:21:5c:a8:19:53:b5:ef:
69:90:0c:62:42:ff:c4:11:b6:bb:e7:75:95:87:34:4f:d2:b8:
ba:e4:16:17:62:e3:fa:09:13:33:c6:cd:f5:40:27:03:63:42:
c6:a5:9c:44:88:04:15:56:d9:af:de:ac:08:29:e4:39:5b:67:
b3:b9:04:d4:7b:f0:51:e6:13:6f:1c:84:26:ff:1c:dc:36:da:
36:5d:9d:1e:d3:8f:c2:1d:e5:fc:b9:d7:1b:00:e2:18:91:cb:
72:50:c1:ea:c3:5a:d9:97:36:b9:13:06:57:04:8d:2b:63:0d:
a2:b6:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:54 2026 by rpki-client