Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: itoWLG6VMOX9jDGp+1HBKs999zKHQ74U32bezJFG8QI=
Subject key identifier: D3:19:6E:E2:CF:28:E4:D0:99:1A:77:A3:36:3D:95:59:D8:37:C3:D5
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019D284E003D159AAF51724063D6437EF04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 034D
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: ChdyyngcQ7guM02rt8SMxai1Hy9NBwc56h2hHY91pks=)
2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:00:3d:15:9a:af:51:72:40:63:d6:43:7e:f0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=d3196ee2cf28e4d0991a77a3363d9559d837c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:cc:76:98:20:55:10:a2:b1:58:34:3a:a3:
a2:f3:91:89:67:8c:0d:01:a4:2d:d9:d9:0f:94:0b:
39:8c:b0:1c:1f:be:ca:3f:a5:f3:87:2e:54:95:32:
76:a7:cf:2b:ce:75:05:64:47:5b:f7:cb:35:52:c6:
77:6c:70:92:0c:3a:9c:af:87:e5:b1:6b:bd:37:02:
51:61:3c:81:9a:b0:f2:e3:0e:d2:04:a3:43:43:d5:
07:a2:03:16:7e:56:e3:b9:45:d9:48:ac:8c:e0:5e:
f7:30:e2:82:20:ac:14:aa:19:b2:16:8d:f1:c1:af:
65:f8:62:f3:31:53:1c:9a:26:33:78:7c:7f:18:21:
55:07:ec:6b:a6:7f:e2:9e:38:33:fb:3c:c6:fe:c5:
d8:48:68:7d:ca:d6:3d:41:0a:6c:d0:a7:0d:e7:ac:
d1:35:f3:04:b6:13:53:87:56:fa:01:85:fc:25:09:
20:8e:9d:68:60:11:d9:92:6b:da:87:9f:57:ab:2c:
0c:92:23:9a:a3:70:f1:69:a0:71:92:bb:f7:22:9a:
74:1c:c8:fb:62:9d:81:eb:51:34:9c:62:7c:32:16:
5b:2c:c0:f2:c0:5d:75:87:74:6e:57:86:a6:15:bc:
ee:d8:43:10:b3:9b:4a:85:be:6a:ea:5e:b1:0e:ef:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:6E:E2:CF:28:E4:D0:99:1A:77:A3:36:3D:95:59:D8:37:C3:D5
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:cb:34:db:bc:c0:3a:10:bf:c0:50:5a:14:66:47:47:a0:
55:60:53:bb:8d:15:15:33:9d:7b:08:cc:e6:8d:44:51:fb:60:
a7:9b:09:52:19:c8:5d:f9:48:24:e1:d7:97:de:db:11:6c:75:
5d:53:43:1c:82:18:4d:fa:db:0b:db:83:1d:14:58:94:b0:2e:
09:c2:52:84:bd:f0:47:09:6e:a2:a0:c3:ac:3e:ab:cb:7b:6d:
0e:13:cc:2e:4a:02:8b:eb:6b:a7:65:c3:15:ab:0c:cf:0c:21:
7b:f9:a5:38:9d:78:92:c6:80:b5:49:79:b7:fc:59:82:e5:68:
12:41:07:e1:35:70:3b:49:1e:66:34:77:95:80:a2:ef:ea:23:
c2:72:00:2c:44:a6:8f:de:1a:9d:3e:53:a6:ed:56:35:84:ac:
72:fc:d6:97:f7:8a:5a:78:bb:9e:8a:7f:00:ec:b3:44:5d:72:
5e:e6:59:1e:6b:3c:22:1a:c7:e1:74:60:7e:6f:78:20:fa:34:
87:7c:ca:65:8f:68:dd:56:ac:50:31:36:c5:1a:2d:8f:99:d9:
b1:90:56:e9:9a:35:d6:ab:dc:cf:44:3d:aa:c1:0b:ed:40:15:
d4:99:87:8a:b8:cb:3a:41:48:96:a0:c1:22:d9:4c:c3:14:52:
d1:51:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:21 2026 by rpki-client