Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: ojl5RTQEQF80L1KiqYSjc4cTcQ6kXWWR+8Oq1im7q9s=
Subject key identifier: 8B:EA:F4:7D:5C:10:B8:D9:7A:F7:8C:BA:61:9B:4A:9D:5F:A7:CB:7E
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019D2703FE5E49921D78CA064EB552A44EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: 8Tue0z4ZXmMccvrrdwPc3nPAYScOp1olxfDmbz0CqeY=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fe:5e:49:92:1d:78:ca:06:4e:b5:52:a4:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=8beaf47d5c10b8d97af78cba619b4a9d5fa7cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:76:e2:27:d2:4e:03:44:dd:64:75:ac:46:
d5:75:98:ea:af:55:31:bd:12:c6:d2:50:96:b8:ba:
a5:6d:43:47:1b:1c:5b:13:05:b9:9a:1a:2f:b5:cb:
4c:19:5a:f1:86:72:29:ec:40:da:28:bd:88:e7:b6:
0a:fb:0c:7c:bf:73:85:11:f3:0a:31:45:a0:e4:3c:
64:cc:a9:59:cb:7c:67:81:d0:1f:99:5c:51:b3:b2:
b8:a3:a0:95:ed:2e:86:bb:71:2f:c5:a0:3e:15:96:
ce:74:60:41:bc:2b:23:46:bb:cc:49:9d:a5:84:ec:
24:59:ba:8d:4f:39:c5:cb:4a:7b:d7:69:e4:eb:1c:
9a:ea:3d:9e:f7:aa:03:7f:16:71:c4:21:18:db:b8:
91:62:e6:dd:ea:b8:f0:87:38:04:f9:bd:a4:a5:f4:
76:42:5d:17:4d:bd:70:e6:5a:f1:3e:e0:4a:b4:6e:
5d:f3:aa:e2:e8:2f:76:2b:cb:0b:c4:85:47:b8:2d:
1c:48:95:12:c6:9d:30:9f:72:d0:27:55:e5:1c:20:
9f:03:23:fd:92:cc:d7:35:4d:3c:a8:ad:ee:6e:46:
1a:2c:2a:16:45:40:c9:de:59:5d:9e:95:ad:88:0e:
a9:8c:13:50:2e:cf:9d:81:ba:19:54:78:4e:79:6b:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:F4:7D:5C:10:B8:D9:7A:F7:8C:BA:61:9B:4A:9D:5F:A7:CB:7E
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5e:da:78:4f:f6:fe:b1:43:c4:cc:2d:c5:7e:54:bd:e5:1a:
c2:e8:0b:12:1a:f2:98:ce:22:c0:8f:ef:1b:5c:8c:e7:05:5c:
2b:0c:5f:1a:b1:cd:30:86:05:bc:7f:bb:1f:cb:b2:cb:a4:dd:
d6:1d:ab:5a:98:5f:bb:90:8d:de:e1:7b:98:ec:32:94:10:29:
3a:45:e7:ab:87:03:bb:02:57:13:9f:ee:ca:4a:38:d3:6e:10:
84:98:e2:c1:a6:dc:57:f8:3d:b2:fc:6f:1f:ca:48:36:39:ae:
1f:d0:70:69:39:1d:9d:b2:54:09:1d:6d:ac:35:be:36:88:d5:
32:9b:d1:8d:eb:22:8a:ea:21:95:d8:11:cd:32:e9:82:8a:ef:
58:3d:e9:71:ff:21:5e:ff:b2:e9:a6:3f:3b:80:e1:b6:fc:db:
6d:65:bb:de:70:12:34:dc:63:c4:0b:ce:b1:48:4c:70:e5:d7:
3b:ba:15:6a:19:2b:c9:d7:86:33:88:54:45:03:6a:f5:0c:92:
9e:d3:f7:a2:a1:4f:24:57:33:d9:37:05:47:dc:72:ff:70:89:
6b:6f:1b:2f:3a:38:08:74:c7:3a:19:a2:68:e4:47:9e:95:ca:
bb:66:1b:6f:84:68:7b:78:4f:45:05:8f:8c:d2:dd:62:54:ec:
10:55:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:29 2026 by rpki-client