Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: RSFdPGKJRNJTR4V/rV2hJ7r5C/RC5Haxks6Fjw0nPtE=
Subject key identifier: 3A:58:15:24:E6:1D:7B:E5:C8:4A:54:D0:CB:28:9D:5D:C4:ED:14:00
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 019D33AD480DFC564FDF1E79151F2ECC51E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 0248
Signing time: Sat 28 Mar 2026 09:01:27 +0000
Manifest this update: Sat 28 Mar 2026 09:01:27 +0000
Manifest next update: Sun 29 Mar 2026 09:01:27 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: Y1uCo7ZkeQUjEF9G2nTDJXCqKlwkUkiHMLwiqextufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:48:0d:fc:56:4f:df:1e:79:15:1f:2e:cc:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Mar 28 09:01:27 2026 GMT
Not After : Mar 29 09:01:27 2026 GMT
Subject: CN=3a581524e61d7be5c84a54d0cb289d5dc4ed1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:99:ff:c9:7e:4a:57:5e:3a:7d:ad:c7:d0:b4:
28:71:e4:66:23:80:31:43:2c:8e:72:43:11:6d:dd:
7b:ea:f9:d7:e6:ff:6b:e1:d1:49:59:d0:70:a4:29:
10:70:b2:88:90:d4:68:d0:7d:04:bb:72:a5:30:0f:
99:64:d0:50:58:2c:a0:0d:8c:19:2d:a3:18:dc:39:
9c:26:4c:53:c1:38:b0:d5:00:c4:f5:db:c0:5c:ac:
bc:12:bf:90:91:d8:f0:c2:5d:64:ec:6e:9f:5c:7f:
ac:86:ae:7f:b4:04:8b:9c:e3:6f:3b:51:53:ca:2e:
92:60:94:0b:d0:a6:71:20:49:08:59:63:9c:f6:ba:
d0:16:43:b0:6d:5c:67:6b:10:e9:d9:6e:84:21:fc:
dc:52:58:a7:41:f5:c5:76:07:ae:1e:ea:e1:3f:87:
a1:59:db:f9:cf:e4:9b:17:1f:43:86:bc:8a:59:21:
01:7f:0f:42:58:95:82:3c:c6:c9:e7:d8:8c:32:e9:
29:7a:4d:19:3d:bb:d6:64:53:e2:e4:7c:32:50:ae:
58:36:81:2a:9d:7a:a9:7c:c3:30:15:74:45:53:ef:
77:54:4d:0c:9b:62:7e:06:4e:85:db:a5:c0:a4:ce:
9e:e2:c9:13:31:61:0d:34:7f:70:7c:31:f9:43:47:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:15:24:E6:1D:7B:E5:C8:4A:54:D0:CB:28:9D:5D:C4:ED:14:00
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:f5:25:bb:12:ee:0c:11:78:e3:15:54:8a:82:28:45:e5:
5b:92:59:b6:4c:5f:56:66:da:26:5d:5c:eb:b5:a6:3f:e6:3e:
21:87:cf:88:96:82:f3:e1:29:a9:02:31:1d:8f:1f:ec:2f:3a:
66:43:3f:99:02:ce:77:59:2a:06:7d:57:92:04:ee:f7:13:db:
da:c3:f2:c1:8a:b5:bb:c6:7b:1c:96:57:55:b5:20:41:66:72:
30:df:2b:96:f3:dc:28:b1:a7:9a:21:e5:0c:7c:25:0d:63:f8:
eb:3b:d0:28:81:54:e7:bc:e6:8c:6b:26:29:94:5e:49:fe:c2:
ce:93:d5:00:a4:ab:2a:a7:99:25:14:03:2e:a6:f6:61:3f:58:
2a:e2:9f:58:13:66:2c:b7:35:94:6c:02:a4:71:6e:0d:67:fe:
17:3a:b2:c3:fe:69:34:d4:d1:0c:b7:13:28:e8:cc:42:cd:51:
2e:99:95:3a:f8:27:17:18:03:2d:85:e8:ac:9c:a1:2a:4c:69:
5a:2d:b3:33:57:08:ff:05:8e:0c:cf:19:f0:f5:6a:b8:d9:a2:
12:43:74:e5:5c:3f:e1:fa:12:06:8f:c7:21:57:2c:fb:c3:4e:
57:87:11:18:3e:2f:52:ab:db:ac:18:d0:33:25:58:c4:71:39:
4d:0c:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:32 2026 by rpki-client