Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: hlGpfR8dtkNS0G49ByajZz6xbPnj6qnpZniLBrDvsnE=
Subject key identifier: 53:2A:94:EE:A0:2F:60:5D:AB:D8:83:55:24:01:5A:37:9E:A4:64:69
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 019D25F0EEFC5A5BEBCB9CBFD2292CC87D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 0399
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: IV60KLG4vihfd+crm3ODKn9jEK8cMX3zPCsZON4mWJw=)
2: jMWE95cdXToEzGHRnrJGNVd_shY.roa (hash: ggn3Fl2wZwmOiQ6vfdHYpUj0Mg0aJO8O6vjWtwjQjkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ee:fc:5a:5b:eb:cb:9c:bf:d2:29:2c:c8:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=532a94eea02f605dabd8835524015a379ea46469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:27:f5:2e:6a:71:49:92:76:89:52:19:b6:
98:d7:69:fb:da:af:61:d5:9e:65:6e:13:74:54:c4:
f5:f7:5f:11:d1:a2:fe:cd:02:da:eb:46:fa:98:e1:
df:20:52:4d:a2:f8:d5:bf:a6:11:ca:bb:49:85:90:
8b:38:1d:9e:59:9f:d7:1f:52:55:08:e3:7f:58:c8:
ed:e2:db:c4:de:e7:23:f4:1a:a0:35:bd:17:00:f7:
18:20:b9:f5:7a:66:84:b1:13:65:6f:b1:08:0b:b2:
6c:62:45:05:9b:60:1f:3f:63:e8:d9:5e:de:0f:af:
a0:54:ec:38:dd:eb:74:f5:b3:b7:3b:a9:67:42:18:
b1:1b:da:04:da:47:79:39:77:a1:0c:ce:cf:20:dd:
d1:1a:d3:55:47:28:40:4e:4c:63:d8:e2:62:dd:2c:
7e:9d:d2:e9:c5:00:b1:2b:65:b3:93:8c:47:61:72:
da:8c:e3:85:47:84:69:b8:82:22:70:eb:e4:b5:e3:
fd:6c:f5:95:84:07:d7:78:f2:1d:8d:0c:b0:ff:f7:
b0:79:6a:8c:44:0d:7f:95:4e:db:4a:bc:a1:25:97:
ea:77:1e:a8:56:92:af:6b:fe:54:42:2d:3d:17:4c:
0e:3d:ef:5f:f8:5b:42:d8:d7:d0:f3:01:a1:39:40:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:94:EE:A0:2F:60:5D:AB:D8:83:55:24:01:5A:37:9E:A4:64:69
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:58:68:e1:d0:e0:ac:39:23:23:f5:ad:e9:d4:99:34:df:84:
67:c3:b1:e5:4f:c1:a7:17:d7:d0:42:b4:b5:77:e6:c1:e4:1e:
8d:bc:ef:13:21:ba:e9:37:6a:49:4f:eb:6f:39:bb:e9:bd:a6:
0c:9a:2b:69:21:88:e4:0d:0c:d9:8b:27:bb:07:32:4b:9a:3e:
3d:27:bc:47:c7:73:08:19:5c:95:8e:fe:ca:67:a6:80:ce:0e:
fc:8d:80:e7:f2:86:8d:cb:e4:71:35:5b:c9:22:80:ba:b2:99:
f9:6b:18:cf:2a:03:5e:e4:a3:73:fe:57:81:42:00:37:ec:98:
5e:fd:81:48:af:54:b7:03:a4:98:61:d4:cf:88:1c:aa:e7:18:
fe:13:67:47:71:f4:bd:6f:46:ec:69:8a:a5:b8:61:80:6c:22:
6d:31:7c:69:a1:54:2d:dc:27:a5:60:a4:2e:89:63:ac:78:b0:
2b:dc:87:7d:84:63:25:6a:71:41:87:63:0f:47:b5:6e:bd:c5:
ad:cc:9d:9b:32:db:07:7c:d8:6b:96:c2:45:d7:bb:ae:6b:0c:
c5:a6:5c:29:66:63:81:8f:83:92:1e:0a:66:0f:01:b9:ef:f5:
aa:f2:e3:d1:a1:e4:9e:ea:ff:20:9f:92:32:ea:79:61:38:26:
c3:80:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:15 2026 by rpki-client