Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: reojXW1PX3EghjuNPmS+4rohr2GBc+mT1e1VfBFCWng=
Subject key identifier: D8:C8:17:4E:15:E3:43:17:42:88:BB:06:B7:CC:74:E2:9A:76:DB:E2
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019D25F17AC653D148ACA24AB4E6EB07E28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0A5B
Signing time: Wed 25 Mar 2026 17:01:15 +0000
Manifest this update: Wed 25 Mar 2026 17:01:15 +0000
Manifest next update: Thu 26 Mar 2026 17:01:15 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: k+dJMMYYqoXv+dPOaZZb3VSwQ9qqP+tAc9m6MDlqnJE=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7a:c6:53:d1:48:ac:a2:4a:b4:e6:eb:07:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Mar 25 17:01:15 2026 GMT
Not After : Mar 26 17:01:15 2026 GMT
Subject: CN=d8c8174e15e343174288bb06b7cc74e29a76dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:22:6e:bb:fc:c7:89:95:79:1d:8e:21:75:
7d:e9:9a:d1:65:c2:92:ca:c2:b5:98:10:85:8d:6a:
d4:37:10:57:f1:7b:54:06:f1:3e:af:1d:6d:79:eb:
c4:de:c5:85:d4:87:53:f4:11:49:0e:a5:0f:73:89:
92:f9:11:df:5d:c3:87:6e:30:4e:61:0f:56:ef:02:
1c:84:96:e1:6e:d2:cc:aa:00:38:7d:21:58:d7:c9:
39:10:81:f0:b8:c0:5d:8c:0f:2e:5d:07:aa:d8:4a:
01:b8:79:f3:49:57:4e:9a:9f:27:38:ff:ec:53:af:
2d:c6:3c:c6:96:4b:87:c7:36:c5:a9:0b:19:22:54:
41:6f:b5:3e:00:17:c6:f8:05:21:f2:89:00:d8:a8:
e3:9b:98:69:32:76:00:7d:62:74:cd:5f:7f:82:86:
07:1d:40:50:d4:c6:21:ef:41:1e:0a:a4:69:d9:77:
5b:b1:8b:64:8a:3b:b7:26:c1:08:a3:ca:24:72:38:
c2:eb:21:72:6b:4f:cf:84:92:97:4c:c7:af:cc:61:
a9:2e:76:a7:d1:41:ee:58:89:eb:d4:32:f3:e7:ec:
2e:cd:fe:9e:2f:aa:0f:a9:30:9a:c2:cf:ed:57:f9:
8e:f9:ce:4f:ed:48:ff:25:48:a3:85:dc:c6:9b:33:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:17:4E:15:E3:43:17:42:88:BB:06:B7:CC:74:E2:9A:76:DB:E2
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d9:65:9b:42:ba:1e:93:dc:4d:71:b5:67:0e:43:dc:13:08:
3a:2b:f4:d4:e6:ce:a3:5c:63:0c:70:27:37:15:88:2f:d8:b1:
79:7f:80:8c:39:57:88:1a:ff:3e:0b:a9:24:c9:f1:7c:45:7c:
55:63:4e:9e:f1:2c:80:d8:b4:e7:a7:8e:9b:5f:2b:5c:fb:13:
aa:7d:65:8c:f8:de:e2:c9:25:6d:1f:96:bd:49:c2:7f:d5:b8:
85:fd:9a:3d:9c:a5:6c:cc:83:39:6b:10:c4:0d:6f:de:9d:48:
1e:f3:37:d6:1d:f0:26:31:fe:8b:4a:b2:2a:30:5f:c6:39:7d:
f2:28:fe:2e:2c:97:18:10:27:62:89:48:b3:12:df:8c:e0:43:
2b:43:e1:e8:68:85:49:08:06:62:ee:de:41:38:fe:2d:54:8e:
56:15:bd:0f:41:7a:20:bd:8f:2d:eb:33:79:e9:f2:8d:7c:a7:
b0:d9:48:ab:61:93:fc:c1:3c:82:57:ad:04:c4:cf:85:da:06:
52:de:30:2a:d0:ee:98:b2:61:c2:7b:7c:ce:ae:df:8c:ae:3a:
e8:4c:90:f3:33:fc:46:e1:1f:cc:2c:c3:66:ab:33:7e:69:1d:
c5:84:18:be:fe:8b:f0:45:62:6f:b3:2c:1b:32:45:42:9a:a4:
2c:64:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:18 2026 by rpki-client