Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: rO0dfADgrJzfpAZbCY7MXT4vc28WhLPaVie8ch6/MOk=
Subject key identifier: 0D:C9:A3:D7:68:85:1D:73:18:1A:0F:0C:64:CE:89:39:BE:6C:73:CA
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 019D28F32AC024EC9E8C4F266F1B8D297762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 14BF
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: Bl/PyL7CV5uo6Rw9pLqgXEfKmKK5FcdkWIdNOgVH4RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2a:c0:24:ec:9e:8c:4f:26:6f:1b:8d:29:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=0dc9a3d768851d73181a0f0c64ce8939be6c73ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:3e:66:38:4c:58:13:cc:aa:99:93:11:f5:
17:80:8b:6b:b2:75:05:ee:20:63:45:d6:8b:7e:cd:
c3:99:61:50:f0:61:23:b4:e7:68:d9:d1:2e:28:66:
d8:c9:7a:c3:7c:92:2f:65:f6:08:99:7c:2f:79:18:
82:8f:b6:00:ed:30:7d:31:02:ba:c2:da:46:8a:b6:
d0:bd:c6:ff:94:bd:90:fd:d3:98:ab:86:b6:8d:92:
5f:26:4b:eb:79:58:b4:50:e8:c1:16:a4:e2:76:95:
48:3c:14:ba:84:53:7a:b1:3e:ab:f6:92:cf:fd:1a:
af:59:68:33:07:e9:83:da:8e:6c:aa:45:17:2f:9b:
4d:b5:cd:23:27:a1:a5:be:65:ec:2c:12:fa:47:b2:
a4:92:6a:38:f1:89:d2:02:80:4f:29:37:0f:c9:84:
8b:bd:b2:9a:02:59:af:69:54:ab:f7:b5:41:8d:21:
ce:84:e7:94:c9:d0:dd:59:78:2d:02:60:52:52:d4:
67:d1:bd:66:bd:e4:bf:fd:e4:6c:97:46:be:90:03:
78:b7:d2:6b:3e:16:79:2a:23:43:f8:81:53:c7:65:
f4:49:b0:40:e6:b0:72:90:7c:8c:a5:cd:d9:b0:10:
72:c2:c0:6a:b8:74:5a:4a:92:14:d1:ca:55:1f:4f:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C9:A3:D7:68:85:1D:73:18:1A:0F:0C:64:CE:89:39:BE:6C:73:CA
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:0a:4a:3c:e1:ce:f3:bb:31:17:df:30:0d:79:85:e7:05:
a5:5d:89:3f:8d:db:d7:e6:de:8f:bb:36:76:d0:0e:0e:2f:36:
a6:bb:49:d2:2d:11:47:d4:ad:77:c3:09:38:a3:eb:d7:0e:51:
e6:4c:97:cd:21:34:3e:9e:07:86:ec:f9:12:8a:41:ab:5b:99:
49:c5:41:bc:f2:f2:f5:e0:51:3a:15:70:e3:30:35:80:74:7a:
35:8d:19:d6:d5:c2:62:76:d0:c0:0b:c3:f8:14:e5:aa:a9:5f:
f7:04:79:9d:15:fa:db:c1:a7:7e:6c:97:f0:6f:07:64:0d:fe:
43:8d:01:c6:57:7a:94:f0:78:83:e7:b9:24:38:90:c3:6e:71:
0c:28:ac:90:9b:f0:6e:40:f5:9f:d3:41:87:ec:9e:dc:93:8f:
2d:3a:6e:20:0d:f0:54:55:04:f4:0d:1f:a2:ae:99:bc:5e:14:
78:0a:1d:4b:2e:ab:03:a3:19:a6:60:5e:0a:18:56:1a:48:20:
5b:7f:87:4e:46:38:bd:e8:2d:36:ac:8b:ae:c1:06:b8:0f:34:
3e:c0:97:8b:54:a8:e7:14:7b:71:85:0b:1b:b8:90:c5:0e:e7:
93:52:a2:9a:8f:da:33:e2:a6:ee:d0:c4:3a:6d:6e:4f:b8:b8:
87:50:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:43 2026 by rpki-client