Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: +FbP5nj+vMw+o7hIjfsC0PR4QsVae7NBcFZ59oNKigg=
Subject key identifier: 2F:34:82:77:82:70:30:68:35:E7:54:B6:89:EE:3D:4D:BD:84:52:CE
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 019D322C576F541627B97156B43E338E2B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 07DD
Signing time: Sat 28 Mar 2026 02:00:59 +0000
Manifest this update: Sat 28 Mar 2026 02:00:59 +0000
Manifest next update: Sun 29 Mar 2026 02:00:59 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: kgV0KmtCR6fhQhRhYQppNyGINopPObfFfDjzoestHpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:57:6f:54:16:27:b9:71:56:b4:3e:33:8e:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Mar 28 02:00:59 2026 GMT
Not After : Mar 29 02:00:59 2026 GMT
Subject: CN=2f3482778270306835e754b689ee3d4dbd8452ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:05:0e:a1:41:c4:67:ca:50:d7:89:43:0f:
67:7a:ca:23:6f:31:2a:df:7e:ad:7c:82:84:8c:96:
e8:07:e4:c9:38:71:f4:5b:c3:4a:70:82:5a:34:50:
dc:d3:b4:dd:9c:26:24:ef:06:bd:0d:5c:6d:de:88:
56:a2:8d:71:79:e3:4d:c5:a3:77:e2:4c:27:19:79:
e6:d9:4c:ea:50:6a:94:67:98:31:f3:dd:ba:47:55:
39:6e:62:cb:05:f8:2d:12:ac:27:b8:74:44:df:8a:
d0:89:78:14:9d:fd:9e:d2:b4:ed:39:f9:2a:61:72:
0c:2c:84:af:33:65:21:aa:71:e5:f3:2a:c0:34:68:
33:5a:2a:81:86:df:f9:80:be:b2:a9:03:4f:3d:de:
7c:af:5e:b5:92:a4:38:90:0f:e2:a9:bb:5f:10:5a:
f9:2c:32:9c:6d:da:09:26:27:2a:6c:38:5f:33:7c:
0c:5f:30:54:2e:83:60:b2:56:b0:b2:45:03:e3:13:
26:ec:c4:34:9e:47:f1:1b:a8:1d:5d:68:dc:5e:d9:
62:46:8a:21:c5:41:cc:94:ff:d2:ba:5f:6c:16:53:
be:34:31:62:cf:6c:a6:30:9a:39:20:ca:d4:93:1c:
7e:d5:82:ee:b0:f1:e2:d5:70:2c:2e:73:49:b0:76:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:82:77:82:70:30:68:35:E7:54:B6:89:EE:3D:4D:BD:84:52:CE
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:55:6f:2b:31:5c:56:74:b8:1f:68:a1:f7:ad:95:a9:b7:fe:
5f:5b:72:0d:03:60:52:ea:17:67:27:52:d6:65:bf:66:6a:a6:
4b:21:dd:1f:c2:a6:6d:b8:d6:77:77:00:d0:59:75:00:4a:75:
1c:0d:b3:1b:d4:12:80:d4:06:1d:8e:6e:37:5d:9f:ac:5c:28:
f3:28:7d:1a:4e:37:fc:c8:0f:16:27:ae:a4:22:6c:50:0b:81:
ef:d1:27:fc:fd:15:9d:c6:1d:39:af:82:32:20:c1:dc:0e:e7:
5a:4f:79:31:6d:a3:10:97:c4:3d:19:80:40:c0:69:f3:37:17:
37:f4:da:fe:e6:28:33:a3:e6:52:3c:5a:a9:07:e1:b2:c9:a1:
06:4e:36:df:63:d4:93:d4:1f:b9:a4:4b:1a:97:4d:d5:d8:23:
28:fd:6f:28:46:ad:2e:dc:37:37:68:33:d8:67:46:09:2e:2b:
ea:0e:0f:4c:3f:2a:3b:ea:81:d2:0b:6d:b1:1a:1e:e1:aa:1c:
4d:6a:ad:b7:cd:65:11:47:24:89:da:ab:fd:49:e5:aa:b2:c3:
12:3b:1e:7f:76:81:02:80:38:89:6c:01:f4:f5:11:a4:39:32:
b3:e7:94:5c:5e:6c:f8:93:d7:05:d0:22:92:48:8d:84:59:40:
14:3a:6f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLFdvVBYnuXFWtD4zjiueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzUzNzJhYjU0ZTBkZjNiZjUxNGQ1ZjA4Y2E1MmU0Mzdi
ZDkxYTQwHhcNMjYwMzI4MDIwMDU5WhcNMjYwMzI5MDIwMDU5WjAzMTEwLwYDVQQD
EygyZjM0ODI3NzgyNzAzMDY4MzVlNzU0YjY4OWVlM2Q0ZGJkODQ1MmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqooFDqFBxGfKUNeJQw9nesojbzEq
336tfIKEjJboB+TJOHH0W8NKcIJaNFDc07TdnCYk7wa9DVxt3ohWoo1xeeNNxaN3
4kwnGXnm2UzqUGqUZ5gx8926R1U5bmLLBfgtEqwnuHRE34rQiXgUnf2e0rTtOfkq
YXIMLISvM2UhqnHl8yrANGgzWiqBht/5gL6yqQNPPd58r161kqQ4kA/iqbtfEFr5
LDKcbdoJJicqbDhfM3wMXzBULoNgslawskUD4xMm7MQ0nkfxG6gdXWjcXtliRooh
xUHMlP/Sul9sFlO+NDFiz2ymMJo5IMrUkxx+1YLusPHi1XAsLnNJsHa1jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC80gneCcDBoNedUtonuPU29hFLOMB8GA1UdIwQY
MBaAFNw1Nyq1Tg3zv1FNXwjKUuQ3vZGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMWEzNGYtOTNhMy00MWIwLWIwOTYt
MTk3N2FjMjRkMjExLzEvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMWEzNGYtOTNhMy00MWIwLWIwOTYtMTk3N2FjMjRkMjEx
LzEvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFVvKzFc
VnS4H2ih962Vqbf+X1tyDQNgUuoXZydS1mW/ZmqmSyHdH8KmbbjWd3cA0Fl1AEp1
HA2zG9QSgNQGHY5uN12frFwo8yh9Gk43/MgPFieupCJsUAuB79En/P0VncYdOa+C
MiDB3A7nWk95MW2jEJfEPRmAQMBp8zcXN/Ta/uYoM6PmUjxaqQfhssmhBk4232PU
k9QfuaRLGpdN1dgjKP1vKEatLtw3N2gz2GdGCS4r6g4PTD8qO+qB0gttsRoe4aoc
TWqtt81lEUckidqr/UnlqrLDEjsef3aBAoA4iWwB9PURpDkys+eUXF5s+JPXBdAi
kkiNhFlAFDpvBA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:41 2026 by rpki-client