Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: VsOLIS0veZWll4hWsfkZK7IchfyRYo/zel4U5y5YWCQ=
Subject key identifier: 79:79:96:BD:59:64:D6:2C:4C:DC:DC:EF:52:F8:87:93:65:F8:61:B3
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 019E1D599C00EEAD439324887D0E6D6A0078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 02C1
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: Z0DekaDO8qBmxyF5vIoV0Lw7IQwIgEzUYBz2MthPRsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9c:00:ee:ad:43:93:24:88:7d:0e:6d:6a:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=797996bd5964d62c4cdcdcef52f8879365f861b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:9c:26:08:d2:bd:f1:95:f7:b9:aa:fa:15:
f4:10:fd:79:bb:a4:0a:ea:93:73:9e:0d:de:04:a8:
04:07:35:aa:02:c9:b0:fb:e7:bb:8a:b9:16:71:63:
bc:93:65:3f:7a:1e:83:91:af:c3:a8:95:1e:56:d8:
08:a5:38:ae:d7:d5:d2:61:5e:bc:ab:b1:3e:32:71:
96:c2:49:0e:da:3d:d5:dc:58:da:26:8d:a3:e9:c9:
ad:7b:1c:20:d4:89:53:cf:e2:d0:1d:04:51:69:8a:
a0:99:dd:43:40:22:28:4a:b7:f5:1a:86:0f:5f:fc:
b5:83:4d:da:43:ac:0e:34:ed:71:1e:b4:8c:35:14:
20:fe:b6:01:63:86:19:20:d9:54:a2:a6:7c:ab:cd:
5b:05:c5:ef:54:09:e8:4a:13:74:a3:2b:10:6b:d3:
ed:12:a4:61:9c:c9:b6:42:82:67:c4:61:de:30:23:
02:83:13:fb:34:7f:3e:8e:71:6e:c6:77:0b:76:4c:
45:09:23:a1:e0:d7:e8:60:2c:1f:b2:e3:fc:18:b7:
51:22:a9:9f:68:d3:fb:2f:18:98:4e:40:18:3b:22:
6f:05:88:a8:a1:0c:6d:db:d9:93:84:1e:d6:02:87:
0c:54:4c:73:82:71:0c:50:06:e2:c9:3c:d2:cf:e6:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:96:BD:59:64:D6:2C:4C:DC:DC:EF:52:F8:87:93:65:F8:61:B3
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a8:53:d4:56:ee:ce:8e:40:67:53:50:6b:e7:d4:09:90:49:
60:a4:26:f3:3a:ae:bf:21:aa:e9:0d:4d:18:18:8d:0b:08:a9:
a2:9d:9b:0c:a9:af:e1:ed:a0:1c:f1:0a:90:5a:ac:54:95:fa:
66:d2:3f:53:a2:75:41:a4:a5:e1:b8:fe:e6:a8:22:86:7c:e5:
43:01:d4:73:e4:99:e0:15:68:d6:b3:be:43:c7:bc:bf:39:65:
e2:d9:98:70:fc:3d:66:82:f3:0b:96:28:c8:af:35:72:a9:c6:
a2:dc:21:ca:ff:0a:4c:35:7e:1a:1b:a7:b0:af:e6:1f:58:66:
5a:0b:b2:a0:bc:fb:5c:00:d9:80:e3:ed:2e:8e:c6:92:ee:b9:
1d:0e:3d:f7:47:fb:1f:db:b7:e7:73:59:97:bc:d4:ef:48:57:
46:b4:78:0b:5b:0e:97:64:f3:41:3f:f1:d1:c9:41:eb:2e:15:
13:f8:83:bf:5e:08:70:e9:32:14:60:2c:0a:f8:f8:93:89:27:
b1:a4:1f:03:1a:e1:09:66:f0:15:0b:c5:ba:49:4a:35:05:0a:
94:d6:fe:8d:03:6a:7a:d0:2b:c8:bc:7b:19:cf:77:c3:04:e2:
53:fd:8a:c7:7c:ae:b0:00:8c:22:50:17:ff:42:fb:1c:d1:76:
c5:f4:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:53 2026 by rpki-client