Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: T0QoTYofGwTOmGjAm55eShvO9REcVZDTc7TBcuzgqdU=
Subject key identifier: BA:00:6D:17:27:A0:B0:E5:16:7D:48:08:6D:6C:A8:7A:A4:FB:4B:BA
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019D25BA5786066D30E2ACB8E3E8F15AC602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 155C
Signing time: Wed 25 Mar 2026 16:01:02 +0000
Manifest this update: Wed 25 Mar 2026 16:01:02 +0000
Manifest next update: Thu 26 Mar 2026 16:01:02 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: VUXxmmBfxp1gwlIqh2aoXZvTtNOurZhRUXUD3gVbrEo=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:57:86:06:6d:30:e2:ac:b8:e3:e8:f1:5a:c6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Mar 25 16:01:02 2026 GMT
Not After : Mar 26 16:01:02 2026 GMT
Subject: CN=ba006d1727a0b0e5167d48086d6ca87aa4fb4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:67:7b:f9:6f:e2:a4:df:0e:ce:c7:c5:75:
94:aa:a4:0d:96:37:02:98:bd:2f:ae:ee:fd:8c:37:
60:c6:3e:6d:69:c6:f0:bd:09:82:1f:95:2d:6e:2b:
8b:41:b2:dd:3a:26:d8:64:a3:c2:39:50:2a:d2:14:
cb:d5:19:b5:c3:90:26:0e:be:66:8d:83:b1:c5:de:
e1:78:22:f2:8c:b1:07:55:e9:93:e6:ad:c2:50:c0:
b9:55:ac:32:77:34:27:f2:ac:62:a4:7a:92:b5:38:
94:e3:71:5e:bf:1c:6a:44:33:45:48:40:0c:2a:5e:
27:5d:36:59:0e:fd:bb:f9:13:58:cd:68:8e:f9:da:
e1:02:36:68:75:95:dd:2f:27:9b:3c:34:c9:bb:4a:
63:18:9f:d5:55:0a:7b:5d:18:92:3c:fa:69:7e:d1:
aa:6e:98:6c:bf:26:33:15:5a:57:a0:81:37:6a:a0:
16:c1:e3:13:f1:87:fe:b4:7e:d1:bc:c8:57:b2:e8:
34:54:07:bb:2c:eb:a4:cc:f1:94:28:e9:48:2e:93:
d8:9b:6c:96:6b:d7:93:a8:3d:9f:45:82:38:59:44:
f6:ce:b7:ab:c3:d1:db:73:80:ce:6b:04:8a:0c:3a:
f0:b0:a6:dc:b5:16:cb:ca:c1:19:6e:d8:f3:da:f3:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:6D:17:27:A0:B0:E5:16:7D:48:08:6D:6C:A8:7A:A4:FB:4B:BA
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:a7:79:ba:e5:b1:c6:64:8b:3f:6d:c1:8a:99:28:84:da:
cb:eb:14:56:be:6e:9b:c8:7c:77:66:5c:d4:2f:c1:74:49:c8:
b7:46:72:98:a3:bd:c0:aa:da:b9:8b:23:b7:46:a8:14:9f:6c:
29:05:88:8d:56:c5:cc:69:fa:01:20:d4:c7:fb:a7:d2:bb:a0:
1c:66:ae:2d:0c:df:e8:1b:1b:6f:59:06:81:0b:ac:bb:74:ee:
95:df:c9:d6:2b:da:a5:b1:02:9a:23:78:ac:6b:50:c7:c1:da:
b2:a6:64:5b:fb:3c:66:f7:3d:af:58:4d:ac:e9:b7:41:9c:e3:
ea:2e:b8:92:84:8a:77:0b:94:9e:bf:39:1a:ca:9b:15:67:9b:
b0:74:bb:23:b1:9a:46:a8:aa:7b:d1:8e:a1:23:18:3c:81:80:
66:05:e5:65:b7:ae:50:f6:d6:53:5f:31:6f:b3:45:08:27:81:
15:db:db:f8:59:8a:5c:1e:cc:ea:7e:44:07:ae:ea:b0:a1:0d:
96:1c:29:f0:02:d8:1f:a3:b5:5f:e8:1e:de:ff:fe:14:45:ff:
c7:e5:3f:b1:a6:ef:44:e0:90:c6:b7:f3:b2:62:69:0c:e4:d3:
72:69:e8:82:d5:ea:8d:d0:69:8f:37:0a:9c:91:de:74:3f:64:
5c:18:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:28 2026 by rpki-client