Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: f94zyB/nPIhFvrqqZFhMmEbWvIvIs8pCaoPuzaZx/HQ=
Subject key identifier: 3B:EA:35:EE:05:FC:42:CD:A3:1B:57:26:56:9F:55:D7:6B:D1:74:2E
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019D28F2DF87EFFD4F600935E42A18023F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 07:01:38 +0000
Manifest this update: Thu 26 Mar 2026 07:01:38 +0000
Manifest next update: Fri 27 Mar 2026 07:01:38 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: c91vCbCV7NrecnSjy7zZMUQs+9E2cTlcIg7/tcResQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:df:87:ef:fd:4f:60:09:35:e4:2a:18:02:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Mar 26 07:01:38 2026 GMT
Not After : Mar 27 07:01:38 2026 GMT
Subject: CN=3bea35ee05fc42cda31b5726569f55d76bd1742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:67:b4:12:f5:be:7c:2e:05:eb:f0:70:c4:
4d:ba:c7:31:ac:7b:4b:7d:7a:a9:eb:65:b2:88:95:
ea:6a:48:51:61:cd:14:0c:03:b9:25:52:0e:39:bd:
42:5a:1a:b2:c4:2f:69:3f:c1:dc:e1:ae:a5:13:a4:
dd:c8:1a:d7:02:83:90:45:87:f5:29:50:18:24:39:
cd:bd:78:36:92:c8:d0:c2:7b:ac:92:43:34:d3:fb:
a9:10:b9:d7:08:96:5a:b8:1b:4e:1d:1f:b2:f0:21:
47:0a:27:41:17:45:f3:e8:bd:88:b2:8e:20:42:b5:
0f:4f:01:21:66:e2:f3:72:2b:a7:47:e3:59:a0:ca:
ae:14:5b:67:bc:9f:04:6a:c5:27:12:e7:a6:2b:09:
c3:6d:45:89:22:9a:a1:02:88:12:c4:7d:f3:48:01:
73:e6:ae:43:ab:41:ca:14:c6:06:b2:25:ca:aa:00:
93:1c:83:a2:f5:45:cc:06:90:bb:bf:8f:71:5d:47:
7c:74:33:c4:6d:71:5e:0c:d3:c4:67:fb:ed:f1:c8:
55:6b:75:e0:90:c8:7d:26:f2:83:a4:58:43:5f:a4:
e3:c2:1b:a6:22:87:1d:0e:f1:88:af:4e:da:17:a9:
e0:27:13:d6:ed:3c:b5:82:92:53:f8:c8:ea:64:60:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:35:EE:05:FC:42:CD:A3:1B:57:26:56:9F:55:D7:6B:D1:74:2E
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:75:2e:b5:f9:c6:19:f0:fa:19:d2:08:57:eb:5e:e5:5e:b3:
00:48:b8:ea:dd:37:fb:30:f7:dc:fa:13:76:cc:cd:59:49:cb:
18:fa:9b:f6:42:f0:3c:75:df:c8:c4:6b:92:ed:92:9f:60:00:
1c:a6:c2:2d:ba:8e:b4:97:60:7e:ae:43:c1:2d:a4:76:e9:90:
90:4e:0f:bb:8a:a2:19:3c:55:2d:f6:47:86:ed:1e:25:54:23:
4b:79:7e:90:4c:e4:f8:9c:c2:88:99:f4:aa:5f:85:d1:5c:b4:
33:3e:c0:3d:44:32:68:0b:1c:3f:28:71:4f:2b:88:1d:9d:32:
20:de:05:81:6e:99:f3:5d:5f:7b:51:59:47:31:74:b2:2e:10:
8d:5b:e3:56:bd:a6:fc:01:d4:f8:7c:44:0b:71:3c:34:9f:e4:
a1:bf:08:50:ca:28:4b:81:c4:2b:14:52:50:91:9b:07:99:a2:
5f:fa:47:a4:19:37:ad:ac:aa:f0:4b:14:98:03:35:57:65:2f:
cd:2d:cf:b0:cb:d3:5a:22:a4:05:8c:86:f4:2a:58:cb:c7:10:
1c:79:27:9e:04:0b:2b:44:06:78:2c:6b:b2:07:78:14:ad:b1:
ed:a2:7f:a6:40:c5:b4:f1:b0:0a:c0:de:14:7b:ed:96:c7:71:
f3:ba:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:45 2026 by rpki-client