Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: rFVukkK9d7VCPN2LNxKtn9Fq8iSXFV+DEZ+QP9iEGSQ=
Subject key identifier: 65:69:6C:2E:04:95:6E:43:E4:A0:7D:1A:2C:CE:C9:AD:C4:5D:7B:4D
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 019D2703A5C1445BD8002F6D580A5C0BAF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0BE2
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: s9cKuc0n/FQzHiKdUtvf2+8eHvGdSnmJs+K7OMV2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a5:c1:44:5b:d8:00:2f:6d:58:0a:5c:0b:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=65696c2e04956e43e4a07d1a2ccec9adc45d7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:ef:86:f2:be:f9:67:10:d2:ad:bb:7f:1d:
67:81:3a:a7:a5:74:a4:b3:c6:16:3e:87:bd:75:d8:
13:dd:30:24:c4:22:94:9f:d7:c1:88:d4:83:0a:29:
dc:7f:2b:c5:c6:64:8d:16:a4:f4:c2:60:2d:e5:b7:
30:cf:da:95:8d:ea:45:e3:06:48:06:21:cf:dc:53:
b3:0c:99:96:80:79:48:5e:dc:07:04:89:19:72:c3:
bc:6e:e9:04:87:dd:94:ad:2c:25:10:87:17:29:01:
d5:e3:58:c6:1b:12:c3:74:23:f8:68:4e:53:44:3f:
79:2b:5c:46:b3:de:48:a2:51:1c:6e:52:72:71:e2:
87:5c:db:68:37:ae:8d:58:fe:0f:a0:1c:59:8a:0d:
f9:78:40:84:9e:3e:9c:26:f9:ab:5d:26:29:d1:8c:
77:43:79:83:60:16:de:fd:e8:fb:0e:cf:47:12:95:
e6:d1:a5:63:93:04:35:a8:45:db:3a:38:06:8a:3f:
76:24:4d:f5:64:fc:f2:23:1f:c2:60:1c:bd:e4:df:
e4:4d:58:dc:0a:8b:40:30:d0:8e:c3:db:88:db:55:
98:29:76:ee:45:34:f4:67:1c:8a:78:7d:15:49:92:
80:e6:09:a8:9a:38:50:55:55:de:6d:73:d4:a4:87:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:6C:2E:04:95:6E:43:E4:A0:7D:1A:2C:CE:C9:AD:C4:5D:7B:4D
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:12:0d:1e:be:58:0f:90:bc:65:8e:4b:57:c9:8b:a3:d4:df:
31:8e:d8:76:98:a3:9d:be:4c:c8:65:ac:a3:55:df:ce:47:19:
49:13:de:41:1d:ef:76:98:dd:b9:2c:7b:08:41:28:31:3d:aa:
d7:83:16:91:a4:35:cc:55:2e:e8:d4:47:07:d0:10:71:13:b8:
69:c0:f4:48:67:04:00:28:e1:25:46:ca:34:75:24:4b:2c:c8:
0c:ac:10:c3:dc:10:19:d9:ee:d4:39:f5:6c:8f:38:ca:b5:c7:
a2:32:96:a4:84:8f:78:d2:bd:60:de:be:ee:9d:61:40:e1:5b:
7f:d2:50:c1:f9:9e:be:c7:52:95:7e:4a:be:c6:f8:8a:c6:05:
25:d2:9f:50:b0:23:17:26:a1:ec:00:16:34:70:31:4f:e4:84:
30:aa:2b:61:8f:c5:db:ca:ca:e9:6f:0d:ff:77:fc:72:d3:67:
48:b6:23:3a:d0:c8:73:57:f8:e4:a4:77:57:f8:83:c8:66:3d:
c9:21:76:7b:0a:ce:5c:74:f4:f8:2c:56:8f:2f:ea:ca:b6:3d:
e1:66:3a:1f:1b:55:bf:99:50:ec:4b:2c:01:2e:ca:c9:10:c5:
be:6c:bc:75:7d:5c:88:b5:ef:c1:80:40:71:e8:b7:28:cf:4a:
84:a1:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:36 2026 by rpki-client