Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: z9w4H3hKyh/fGyReYIqFJZwIZv5OvWOGYAz7kguGZT0=
Subject key identifier: 3C:42:F5:17:3F:B4:27:6E:DE:21:F1:E6:F6:F3:4D:B3:0E:BC:70:32
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 019E1EA36326C008E3B9D46543618F3D2343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 06E3
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: YwNpfuCNbSR1grgloQ9ljm48Lm3lcDrPvBtxcEV8QFs=)
2: SAIHz1BSLN8cZrRdxLMBgPm4XlA.roa (hash: McGCOon8pvSTjIiegxDTJso9YyCAyFlc2PqcW0Wd9HE=)
3: kAZJSgS29MgxZueFo76bZT3RLoo.roa (hash: 3PDTIlQgL4yc+u1IAv1XjtSyfqW/Sc3TvGpNsbSmrQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:63:26:c0:08:e3:b9:d4:65:43:61:8f:3d:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=3c42f5173fb4276ede21f1e6f6f34db30ebc7032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:7f:df:ca:59:08:fd:8d:4d:42:66:11:9b:
78:a1:20:f3:84:c6:0c:d9:da:74:54:ef:26:94:da:
ab:f3:84:d0:bc:6b:bb:fc:94:98:8a:3c:05:81:b8:
1f:f5:b3:b5:63:23:ba:05:0e:d9:28:f4:14:e1:54:
7d:2b:46:cd:67:a4:a3:a6:75:c6:de:e3:95:10:13:
3d:c9:b5:7a:dd:39:6e:6b:1e:7f:dc:b0:32:16:59:
a4:6e:71:87:dd:01:69:db:e7:6c:90:a8:c5:41:4a:
10:25:64:8f:7e:7d:0a:60:72:5b:07:29:44:a9:55:
1c:1b:21:aa:b3:04:48:e3:56:7e:02:6b:91:ce:da:
0c:18:d0:b1:d0:b7:5c:f5:dd:15:7d:09:16:1e:c4:
2f:ea:d0:19:df:9a:eb:c0:12:1f:8e:d5:b6:d2:82:
6d:c5:59:af:c1:61:05:b4:21:c6:a2:40:dd:89:51:
91:a9:a9:89:f6:46:59:0f:f0:23:60:f1:0a:d6:fb:
a3:ad:27:46:29:f4:9b:ca:da:bc:30:c2:ec:d1:62:
16:e1:74:b2:f4:95:82:4f:a2:ce:02:f7:7a:cb:61:
9c:0d:37:e4:2d:18:af:34:f6:2b:15:0e:55:15:87:
ed:f5:e7:b5:4d:81:b1:bb:14:10:c9:67:ad:ae:9e:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:F5:17:3F:B4:27:6E:DE:21:F1:E6:F6:F3:4D:B3:0E:BC:70:32
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:61:b8:11:1f:ec:95:e3:1c:ff:22:4f:f1:ab:12:d9:66:
d5:6e:43:90:f3:fc:3f:1c:64:ad:33:26:0a:9d:8d:63:8b:65:
dd:8c:f8:2f:10:b7:8c:e7:12:d7:ca:07:5f:f3:38:24:ac:cb:
51:88:4e:6d:27:67:3e:f2:a3:96:5a:90:94:28:a5:c7:98:49:
bb:66:99:ef:a8:4b:56:ef:4b:ec:c5:04:c6:71:7d:d6:e9:16:
4b:79:61:4a:ba:db:65:ff:34:6f:92:a3:8f:4f:53:2d:71:c5:
c3:dc:d7:d7:ac:ab:1f:80:c2:67:43:d3:07:22:9d:ca:76:3a:
ed:4c:e2:03:c5:6d:e7:d3:f0:38:a1:c4:ae:21:04:18:55:99:
c9:74:52:a8:ec:f4:2a:00:8f:2d:56:7d:c6:5e:5c:3f:5f:c1:
8a:8c:f4:b8:5f:08:e4:a7:e5:ed:e3:2f:86:8e:42:e3:a8:3e:
a8:65:c2:f3:37:01:2e:ba:92:9e:0d:53:70:1b:9b:a9:31:a4:
b6:1a:51:3f:1a:73:d5:b0:1c:2b:11:c5:60:a3:fc:a0:5e:b2:
f6:0f:67:cb:ff:41:43:30:44:d9:7e:6a:e0:c6:b2:da:5d:e8:
4a:82:97:2f:cb:a5:b1:19:49:2b:c4:a6:60:28:e5:a2:5a:29:
01:f7:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:33 2026 by rpki-client