Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: BwDlud6ATBr6nQ0a4qaqLLKKc7WENUaaDoOZ8WMOMEY=
Subject key identifier: FC:BB:45:18:30:92:A1:AC:88:B6:86:68:BA:99:EF:95:1A:83:1F:B6
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019D2627EF64D4D75CF488F91E78E2441634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 11CA
Signing time: Wed 25 Mar 2026 18:00:44 +0000
Manifest this update: Wed 25 Mar 2026 18:00:44 +0000
Manifest next update: Thu 26 Mar 2026 18:00:44 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: AQvpHVA8MGgan1OcX4uc40kVSW+8WX8fWP1/66eBG3k=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ef:64:d4:d7:5c:f4:88:f9:1e:78:e2:44:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Mar 25 18:00:44 2026 GMT
Not After : Mar 26 18:00:44 2026 GMT
Subject: CN=fcbb45183092a1ac88b68668ba99ef951a831fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:4f:46:68:ad:97:1a:b1:19:7d:08:28:d0:
0b:77:76:39:2b:8e:91:f8:03:c5:df:2c:a8:16:30:
00:f8:47:e7:8d:21:bd:0e:ae:a9:63:23:0c:f8:f2:
52:ea:59:1c:9f:31:a8:4b:7c:aa:a5:81:2b:1c:a7:
b7:51:0c:4b:d2:03:1c:53:27:36:1c:a2:36:7b:ca:
8b:db:c6:e3:70:11:70:16:61:7a:5d:7b:69:bc:d1:
ee:22:1b:18:ba:98:d5:b2:3b:d3:1b:99:5b:14:d9:
0b:af:71:b6:a6:a5:34:2a:a0:06:b6:f4:03:0a:cf:
73:ad:e0:e9:de:76:22:6b:6c:b3:4b:77:7f:03:6c:
ed:71:98:8d:c8:5f:a1:d6:9b:c2:9b:3c:91:c6:c6:
81:0c:30:55:ee:35:59:30:62:de:d3:07:b5:f3:53:
05:91:ee:00:2a:20:93:f8:85:15:52:92:2f:e0:e2:
be:4f:ca:1f:48:dc:0f:58:25:73:fb:6e:57:c6:c2:
65:16:4b:6f:3c:56:cb:0c:b7:10:fa:2c:40:5e:6c:
a8:f5:b3:e3:47:f4:83:e6:f8:3f:4f:bc:6c:79:c3:
73:a3:92:70:89:68:19:f2:4f:fe:ad:18:3c:d5:bb:
a3:a5:65:6f:14:0f:a3:ec:16:27:cb:b5:26:a6:bf:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:45:18:30:92:A1:AC:88:B6:86:68:BA:99:EF:95:1A:83:1F:B6
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ee:d3:e5:d0:74:9b:e3:16:de:3b:55:cf:56:23:43:c7:4a:
79:e2:ce:ac:91:5a:4b:71:e8:f4:15:0a:b5:ae:71:37:53:ce:
63:d7:f3:6e:ba:f6:34:cb:76:37:e9:f0:39:26:8f:89:2b:ee:
99:12:39:cf:90:3d:59:04:76:4d:a5:11:9b:5b:57:30:51:92:
d8:43:4e:bc:cb:e7:c4:ae:93:af:e2:bc:ae:2c:9b:b0:e5:87:
af:59:7d:f4:1c:e0:d2:7e:4c:7a:fc:3b:18:a2:2d:30:62:76:
08:cc:8b:bd:9b:a0:cf:08:f9:40:96:27:85:0c:16:33:ea:bd:
a6:18:a5:b1:95:f7:8e:65:5e:80:1d:6f:3a:b4:16:e3:f6:24:
df:10:0b:d5:aa:9d:0d:83:90:99:a1:90:c2:c9:81:48:74:d9:
04:1b:c0:62:92:0a:4d:a8:f4:cb:16:37:bd:0a:66:e9:40:86:
6b:d5:20:fa:11:21:3d:a3:98:b0:a6:07:1d:c4:ce:59:2c:4a:
93:b7:89:16:65:c5:94:d6:96:6d:d8:2d:e3:77:a6:17:fd:fd:
06:ff:09:53:00:65:c2:38:c0:3c:3e:00:3c:10:b3:0b:81:d0:
70:5d:b9:5a:bb:22:8e:84:7b:62:9f:21:48:17:df:d9:a1:26:
68:8f:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:49:14 2026 by rpki-client