Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: OEhz/p1pAmFNWkbpjb7GFfxRkulZ475A8S4lko50Djk=
Subject key identifier: EC:B5:D5:F6:53:8F:76:12:8A:6F:D4:CC:14:E8:7C:CA:6E:9F:00:98
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019D265F0C837767C2DD9EA9D38015535F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0F14
Signing time: Wed 25 Mar 2026 19:00:56 +0000
Manifest this update: Wed 25 Mar 2026 19:00:56 +0000
Manifest next update: Thu 26 Mar 2026 19:00:56 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: zvVmVtI6aRnHZeuztMVKUrg6OP8VjL37l7ZO1gQfgzo=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0c:83:77:67:c2:dd:9e:a9:d3:80:15:53:5f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Mar 25 19:00:56 2026 GMT
Not After : Mar 26 19:00:56 2026 GMT
Subject: CN=ecb5d5f6538f76128a6fd4cc14e87cca6e9f0098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:e3:0b:aa:59:c7:e7:9f:f0:e6:7c:67:b1:
8b:e7:21:c3:62:31:93:35:c4:a3:ba:58:24:59:b7:
9e:ab:f4:a6:f1:15:7d:71:ca:c8:9d:98:a6:94:f2:
ba:fa:dc:73:5b:2c:2f:57:98:07:8a:6a:0d:fd:5e:
f4:6d:0d:f2:ac:2b:e4:7f:e1:0f:1b:ac:5d:9e:69:
fd:d2:31:be:e4:f5:fe:bb:3a:8d:86:a2:aa:5c:58:
84:d7:7a:ad:d8:ba:77:9d:01:ed:29:30:d4:c9:56:
b0:06:67:03:44:be:f1:51:59:16:24:fa:fd:7a:23:
0c:31:f5:09:eb:bd:6a:13:95:66:0c:ae:8b:71:e5:
dc:b3:07:95:4b:72:ee:7b:18:c2:ea:3d:6d:2d:31:
a0:12:4a:57:50:23:1d:19:53:53:93:17:c6:d9:de:
eb:e2:22:05:12:df:c5:92:9f:a3:be:2b:41:99:88:
de:28:3e:bc:e1:f4:35:d4:85:f6:fc:bc:07:63:4b:
33:33:82:ae:9d:a6:23:09:6f:28:ed:83:a1:b6:67:
ab:14:46:f5:ac:b6:c1:5e:d3:1f:3d:9e:4a:07:46:
9a:87:8c:09:44:2e:8b:fe:b6:02:12:fd:47:d4:14:
20:45:5c:99:1c:e5:02:b4:13:e5:ff:9a:23:49:9d:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B5:D5:F6:53:8F:76:12:8A:6F:D4:CC:14:E8:7C:CA:6E:9F:00:98
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b6:b3:23:66:84:58:45:98:ec:5b:97:2f:52:9c:cd:e1:12:
cc:b0:11:88:5e:35:87:05:80:5b:e1:b0:22:94:cb:60:2f:65:
b7:89:75:42:71:8d:a4:c0:78:f6:1f:72:72:81:43:0c:b3:8b:
a8:fa:b5:9a:c6:a6:58:aa:c2:b0:ed:ff:65:bd:7f:11:77:f4:
b5:a7:cf:d9:14:e0:d7:93:95:9b:0a:55:0c:80:c9:05:a0:f8:
d1:a9:0d:38:89:03:bc:59:5c:a7:4e:62:1e:1a:ff:0f:2c:fe:
27:61:73:47:80:8e:eb:3a:3e:58:9e:3e:2e:ab:da:dc:64:32:
4d:11:b9:b4:24:9b:45:56:8c:0c:f1:2a:3f:44:7f:d7:cf:d4:
c6:be:6c:20:41:5a:17:ab:ec:7e:21:82:5b:9a:bf:ce:35:4c:
7c:24:4f:72:bd:a5:39:44:08:19:8f:96:7b:fa:0f:d2:3d:4e:
8f:b4:3e:5d:d1:9e:02:cf:79:84:4c:38:91:f9:3d:68:d7:77:
2e:56:25:6c:bc:85:51:1f:be:ed:6e:60:4f:73:df:c5:af:6e:
d2:55:4a:d9:48:db:70:04:77:fc:65:c8:3e:54:8e:bb:d5:57:
a9:b8:6d:2d:dd:36:66:eb:e7:ef:2d:2e:7a:63:c5:e9:ae:bc:
73:11:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:16 2026 by rpki-client