Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: ot99ra1dNI1vGQ3etNfGnZNkDYz1kry0w+ljvt0v4zw=
Subject key identifier: DB:21:F0:FF:72:3B:6C:78:59:BF:16:D2:8A:AE:F3:A4:99:B8:30:D3
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 019D277234AAA4F6635FEB68387FB10F5002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0663
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: +qlaEpPX/DoIo7vL++kWjOarfId5uLvl62qJeFg4Fus=)
2: SAIHz1BSLN8cZrRdxLMBgPm4XlA.roa (hash: McGCOon8pvSTjIiegxDTJso9YyCAyFlc2PqcW0Wd9HE=)
3: kAZJSgS29MgxZueFo76bZT3RLoo.roa (hash: 3PDTIlQgL4yc+u1IAv1XjtSyfqW/Sc3TvGpNsbSmrQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:34:aa:a4:f6:63:5f:eb:68:38:7f:b1:0f:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=db21f0ff723b6c7859bf16d28aaef3a499b830d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:46:94:77:aa:b2:00:f4:76:a5:c6:34:b9:
2b:b5:36:b1:05:56:6d:f9:6c:7a:36:7f:eb:a0:b6:
58:f6:30:b3:c8:13:2b:6e:29:aa:50:2b:c0:4a:df:
86:69:e7:fa:d3:d1:48:c4:db:da:55:3c:f5:30:bd:
dc:43:a1:f7:fa:25:e2:78:29:fa:34:2c:bf:0d:7c:
c4:c2:fc:cd:03:02:6f:03:bd:e3:c1:36:da:54:25:
cf:d9:08:71:80:d1:fe:33:bb:a9:61:71:65:97:dc:
51:fd:ff:d9:bb:22:95:5d:86:47:c9:42:c3:fc:fc:
77:06:b6:9b:d7:03:06:2f:60:8d:d8:cf:ae:06:a0:
6f:cb:d9:eb:33:df:a0:53:ec:b2:1a:a5:01:2c:29:
aa:5d:dc:66:d6:7a:20:37:4b:8f:9c:2d:d1:bf:aa:
aa:0e:8c:d4:3e:01:05:04:d1:44:2f:d8:97:d0:cd:
a8:73:8f:ad:b6:54:3c:4c:90:6d:e5:17:e5:17:97:
9c:6e:2f:01:be:fd:28:a4:f9:c2:81:82:99:e6:bd:
5d:cf:d5:b3:55:95:99:5d:d7:17:66:77:64:16:8b:
1e:4a:4c:52:f1:ad:c2:79:94:df:38:85:24:94:8e:
05:65:0e:17:58:8d:17:5b:d4:59:90:25:c6:00:3c:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:21:F0:FF:72:3B:6C:78:59:BF:16:D2:8A:AE:F3:A4:99:B8:30:D3
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:9a:a1:4f:f4:94:67:69:3c:5c:c7:4e:ca:af:94:ce:1f:
82:53:7c:bb:fc:db:d9:da:e5:94:c4:81:ca:fc:1b:79:83:c7:
f6:72:0a:f8:1f:e9:22:8d:3b:dd:98:27:4b:2e:e0:1d:db:60:
89:94:be:87:a1:00:22:e1:8a:37:8c:6b:8c:9a:66:a0:3a:e0:
1c:b9:49:c3:fd:05:a6:c2:38:ec:36:fe:c9:38:6f:d6:a2:67:
06:73:c2:c7:8a:32:24:77:71:ac:31:59:c5:62:40:cf:b6:e3:
fa:66:45:8a:f2:0f:e8:5d:e1:e9:22:95:23:16:39:4d:5a:c2:
09:d8:9f:4f:8e:6e:54:09:6d:a6:4d:de:61:39:97:52:6f:22:
65:cc:3a:75:81:43:d2:c2:dd:a0:25:85:49:69:ca:b4:8b:e9:
81:c8:2c:e6:0a:59:ef:ac:1f:eb:b2:eb:99:71:49:50:34:1a:
54:c0:8d:ce:42:35:9e:53:46:00:f5:58:81:db:41:ec:53:78:
f0:a3:38:37:a3:50:4d:76:b7:b8:08:29:73:e8:e7:92:ab:76:
6e:0b:55:8f:54:b5:5c:56:39:30:75:d3:74:2e:df:f3:05:61:
76:e2:e1:99:08:6d:b6:5d:52:ab:24:41:85:a8:4f:1f:93:51:
4a:a1:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:20 2026 by rpki-client