Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: xIChwLynQJ4P1iHqoTsJBuix5azaDaHEUM8MuMinTAI=
Subject key identifier: D2:E7:D9:E3:EA:37:E4:23:FB:0F:18:9B:25:A0:B1:7B:5B:15:4C:B3
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019D28F267DF47E553D41DE071BFAB019815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: ir7G0k70BOF85y7jSbHM5NaADloeWWAMpKFyZ7F2qms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:67:df:47:e5:53:d4:1d:e0:71:bf:ab:01:98:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=d2e7d9e3ea37e423fb0f189b25a0b17b5b154cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:f5:15:04:41:ed:95:fb:df:2e:f5:8f:0f:
17:2f:8b:d6:4d:19:ac:23:cb:44:c8:2a:8d:a1:5e:
04:b9:e9:a4:a8:ae:10:9f:b7:5b:d7:8b:80:a4:a2:
88:cc:de:aa:bd:be:31:17:0a:28:8e:1e:96:61:e5:
6c:0c:35:8a:cd:3e:52:26:26:a6:70:79:e0:c6:c8:
d2:cc:32:b9:b1:01:86:07:28:91:c5:ef:d2:e8:96:
81:db:2d:9c:d5:22:44:27:4f:c3:fb:85:45:51:11:
ce:57:a3:e6:ee:b8:a2:b1:e0:48:0c:d7:2f:07:84:
75:7d:f7:5f:b3:a1:50:cc:32:9c:99:4d:39:70:5b:
88:15:d8:02:6f:8c:6f:80:6b:e7:84:87:28:20:3a:
7f:17:7c:f3:de:5e:b1:dc:40:7b:8b:12:75:32:9f:
aa:b2:4c:dd:54:69:1a:7f:e0:dc:8d:ea:3e:67:ea:
e6:8a:7a:be:32:d3:b3:68:7b:14:a9:7e:92:6f:63:
ec:c3:d0:a6:3c:91:c3:50:c6:aa:09:7e:2e:b0:13:
ad:47:57:ff:4f:e6:30:f5:8b:e7:87:86:3f:54:dc:
03:39:21:79:3f:48:88:4f:f5:c7:21:04:ce:a5:fc:
a4:9f:7e:f2:b1:4e:21:f3:ac:8e:56:4d:a7:20:c9:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:D9:E3:EA:37:E4:23:FB:0F:18:9B:25:A0:B1:7B:5B:15:4C:B3
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e7:2a:d8:45:17:ee:6c:0b:cd:b3:64:4c:b8:c1:4f:c4:b2:
c0:a6:b6:e2:3e:27:6e:2e:49:02:cc:b4:bf:a7:4a:b8:3c:84:
df:54:a3:5c:3d:ab:60:25:a4:93:c4:f7:f7:94:45:33:ae:08:
5e:39:b0:3e:da:26:ed:05:e8:60:04:fd:ad:29:25:ea:04:f6:
22:5d:d2:17:8f:ba:c8:6c:ea:6b:99:31:1b:13:1f:83:7e:27:
f0:83:d0:93:8f:b2:3b:e3:8c:f0:c4:c2:3f:80:c0:8d:40:b1:
62:1a:5b:ed:71:67:9f:73:7c:eb:1e:f9:43:d8:5b:95:1d:66:
2d:bd:e8:98:9c:80:97:31:c9:61:55:27:8d:7c:52:54:2d:4c:
42:d5:a3:89:06:05:5d:5a:94:09:08:64:8f:6a:35:7a:9e:27:
92:00:4c:ba:7a:70:a0:08:90:1d:30:50:84:b8:f4:a3:d0:96:
3e:e4:98:be:b2:5e:a5:6f:9e:e8:af:98:94:58:e6:06:36:77:
d5:a0:8d:f7:97:10:eb:8b:ce:37:28:3a:da:53:4c:36:17:de:
ef:79:8f:6d:c5:bd:23:1a:8e:19:58:1e:21:da:93:ed:4e:51:
b0:62:59:82:04:7c:87:2c:ea:ee:37:86:f5:68:ef:8d:a3:37:
09:c3:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:34 2026 by rpki-client