Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: vtO0w/ES6ALIwGlDf77g8KZyVl7CBQNWYawIc1L8ViM=
Subject key identifier: F5:E0:AF:CF:97:DE:D4:DE:AE:60:FE:86:4B:A3:A4:2D:2A:DE:00:13
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 019D33ACFC70F78D2D0976756428A8AEA086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 05E6
Signing time: Sat 28 Mar 2026 09:01:08 +0000
Manifest this update: Sat 28 Mar 2026 09:01:08 +0000
Manifest next update: Sun 29 Mar 2026 09:01:08 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: csMSEJV1VoDRyv2UrBVKw+ZOyFijlbvEaA8Do7Y2snE=)
2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:fc:70:f7:8d:2d:09:76:75:64:28:a8:ae:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Mar 28 09:01:08 2026 GMT
Not After : Mar 29 09:01:08 2026 GMT
Subject: CN=f5e0afcf97ded4deae60fe864ba3a42d2ade0013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:f6:4d:eb:89:cf:38:ac:0d:bf:12:7e:f0:
fd:4c:90:0f:e2:47:60:17:68:d4:0e:a5:86:ff:39:
de:50:93:df:fd:ab:90:40:52:46:56:23:e2:2a:da:
e6:18:b1:30:de:99:bc:0a:4c:6f:0e:49:d2:f9:48:
eb:cc:ce:3b:db:5c:cc:8e:9d:f9:d6:92:71:f4:74:
62:ec:39:c4:f2:00:a9:a7:d0:40:01:19:c7:6d:6b:
50:4b:53:a1:3b:71:50:4b:2b:35:bd:56:ce:bd:26:
bf:11:8f:b8:05:06:8f:9f:29:25:d9:b3:ae:26:68:
fa:34:87:02:03:82:b9:2c:f5:9f:c1:cb:9d:96:56:
7b:23:2b:4f:b6:02:92:9f:47:b4:00:15:2c:e0:82:
f0:f8:3e:ae:17:08:1f:8f:a8:bf:0b:d5:d3:f4:7d:
06:b2:12:e2:09:41:df:f8:d2:eb:f6:dc:31:ce:60:
fc:0f:2b:b9:ef:56:f4:8d:10:97:d5:0c:1c:71:e3:
41:37:12:48:ce:fe:01:dc:f6:c4:f6:c7:7f:d4:eb:
16:fb:3a:10:9d:e3:9e:f2:a8:77:7f:7e:03:2f:d3:
15:19:42:2d:83:03:59:24:d2:49:51:b4:85:5f:ee:
d0:bd:d5:b4:1b:ba:34:51:f5:3c:b6:6a:69:5a:c5:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:AF:CF:97:DE:D4:DE:AE:60:FE:86:4B:A3:A4:2D:2A:DE:00:13
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1e:41:60:c5:f4:a6:73:ed:a8:47:d9:55:5b:76:24:c7:8c:
22:eb:e1:fd:39:a0:a9:54:d6:ae:57:ac:f9:6e:53:dc:17:40:
9e:73:eb:4a:7e:96:ec:9e:99:f3:0b:b7:29:4e:fa:92:5f:7d:
8b:26:c2:a4:b7:74:3f:38:70:d3:31:a8:06:2e:d9:dd:7e:04:
b0:9e:aa:49:dc:3f:7f:ed:89:42:fd:b6:a0:87:03:ff:3a:c2:
f0:11:14:20:07:42:6b:fc:dd:2e:f0:e8:ce:c9:5c:ed:b2:a9:
55:12:62:34:dc:89:c3:c1:26:39:64:ec:70:d0:63:c5:89:c1:
d2:18:4d:52:df:7c:5e:28:d8:7b:bd:94:ed:5b:02:ee:2a:3e:
8d:a7:40:f0:4c:4f:0e:be:c7:79:29:a7:fc:00:3f:cb:ec:05:
a7:d9:f1:85:64:de:e8:16:03:3d:15:31:fb:ca:dd:ef:f3:ec:
50:25:73:4b:ea:f1:b2:26:0c:7b:91:2d:78:94:d8:86:f6:11:
08:34:8c:bb:9a:38:c0:07:15:72:11:df:63:59:3f:01:bc:2a:
43:24:5c:06:a1:fd:e7:90:41:e2:6a:fe:7e:98:c8:dd:fd:8e:
02:71:ae:91:55:bd:c1:8c:3f:91:49:2d:b9:a2:3c:c4:a3:9f:
62:dc:74:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:27 2026 by rpki-client