Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File: 3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier: EL7TYZMbSc7dRCWx8G7fHKe1U1OuCKs1yp1Y+AZSDMI=
Subject key identifier: 7B:78:A7:A8:2E:78:CD:9B:73:0D:92:08:C9:BB:82:A3:58:42:C5:95
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial: 019D2B17035A1F8FBEE461DD1F2A7D757952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number: 09AA
Signing time: Thu 26 Mar 2026 17:00:21 +0000
Manifest this update: Thu 26 Mar 2026 17:00:21 +0000
Manifest next update: Fri 27 Mar 2026 17:00:21 +0000
Files and hashes: 1: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: osLr60d+ZdsKRLgRex9RjCaHUbVPA2fhDjKGEUyjxl8=)
2: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (hash: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:03:5a:1f:8f:be:e4:61:dd:1f:2a:7d:75:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Validity
Not Before: Mar 26 17:00:21 2026 GMT
Not After : Mar 27 17:00:21 2026 GMT
Subject: CN=7b78a7a82e78cd9b730d9208c9bb82a35842c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:8b:99:21:4a:5d:c8:5e:bf:47:3c:a0:57:
10:74:4b:7e:76:c9:1f:28:b7:0d:46:f8:61:2a:8b:
c6:3c:90:e5:ea:8d:05:4e:ee:c5:50:93:e0:e1:df:
72:86:6a:24:6a:42:2a:bc:a5:12:36:07:b6:0c:85:
43:ef:cc:18:3a:fb:70:72:a3:36:fe:fc:3b:e2:65:
55:d5:27:7f:56:28:44:ea:c9:5e:37:14:55:b3:e9:
a4:ae:6e:0d:43:49:56:1e:0c:56:20:0c:7e:65:47:
9f:6b:dc:ea:d7:9f:0a:be:34:60:17:f8:fb:ee:82:
3b:3e:bf:df:80:0f:39:f7:22:13:53:1e:aa:82:27:
78:2c:25:72:87:57:cb:f6:0f:1f:1a:18:18:b6:0b:
02:66:ab:00:da:9c:93:7c:79:e5:34:0f:dd:2c:22:
d8:2f:c7:12:ab:76:c3:2b:c3:c0:a8:de:58:94:98:
df:74:db:b6:61:7b:14:86:6c:61:c0:5c:0f:80:66:
fb:5b:ad:be:ff:f3:61:48:7d:5f:a4:19:d3:24:02:
1e:6e:d1:0f:be:ba:91:66:b2:d5:48:a0:e6:18:6a:
7d:d5:10:ae:a5:6d:40:51:33:21:ec:de:a7:73:03:
1e:ab:06:1d:f6:97:c4:02:da:4c:83:dc:2f:50:91:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:A7:A8:2E:78:CD:9B:73:0D:92:08:C9:BB:82:A3:58:42:C5:95
X509v3 Authority Key Identifier:
keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:ae:b8:1c:b4:58:bd:d5:84:a2:45:94:bd:51:d6:a5:bc:
11:65:1e:fe:62:e3:66:5e:87:6d:39:2c:c9:7e:e1:0a:6f:98:
38:bb:f8:3f:94:c3:93:88:d9:0d:09:35:e2:e5:27:63:99:fd:
15:ec:c0:a4:34:84:58:79:2c:53:ca:17:0f:d1:62:e7:a2:5d:
31:8f:de:3f:61:c0:e7:6d:fb:30:c7:44:39:fb:bd:4f:79:0e:
3c:86:5a:0b:48:2c:8b:99:ae:3b:67:63:91:c6:d4:85:1c:64:
59:8c:8d:0d:13:9f:ac:07:64:90:06:25:18:ed:0d:86:c7:08:
1a:64:13:d6:7f:62:16:f8:21:7a:e7:dd:b3:ae:ae:e4:57:90:
ff:59:18:63:08:0e:64:d6:04:a8:f4:2f:76:b7:f1:01:e0:87:
95:d5:3e:5c:51:96:8c:ed:23:9f:01:17:5f:0d:98:22:2f:65:
88:e6:25:bd:62:cd:e6:31:a1:8f:df:3b:4a:77:f6:30:90:61:
35:24:fa:fb:e0:e4:1d:a8:ee:79:c8:f0:97:dc:ea:90:c1:00:
9b:1a:d3:1a:69:18:87:16:a7:7a:04:07:9c:8f:17:92:c7:33:
3f:9a:07:d5:68:6e:95:e8:11:6e:e7:23:be:77:4d:1a:12:dd:
25:dd:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:04 2026 by rpki-client