Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: MQLbq+mwd3M82awH18Zci92T6uxax0go/UIXFvBVHVM=
Subject key identifier: 63:2E:41:DC:E6:09:09:03:A2:FB:33:2E:D3:C1:12:06:58:17:1D:EE
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019D2961873FAA38F5E1843ACCB8B185B1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 17A9
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: hr4rlwmldRt+KX8xKvO7DGvZAdBNNM7eRqqRtrrJdfw=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:87:3f:aa:38:f5:e1:84:3a:cc:b8:b1:85:b1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=632e41dce6090903a2fb332ed3c1120658171dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:4e:3d:37:ba:71:bc:7a:a3:0c:27:69:c5:
71:07:70:c9:6a:0a:62:7c:2a:2d:fe:c2:9e:aa:3f:
e6:ff:47:da:20:7b:65:22:ab:1c:72:a6:11:41:33:
93:d1:47:15:6b:3c:83:46:62:74:d2:a3:9f:be:22:
79:7e:b7:66:a1:02:55:2a:7d:17:92:a2:f1:55:1b:
a4:4a:fc:81:db:99:37:ec:35:21:27:d4:5e:73:5c:
15:62:f0:78:1e:c6:8d:91:d6:90:e4:8d:4a:4b:91:
ba:6e:f1:fc:aa:53:d3:60:2e:c2:01:b4:f6:a8:66:
a7:9e:6e:92:4b:58:91:9c:ec:9f:9e:ef:36:19:89:
1e:fa:25:95:bd:a0:d4:bc:89:9e:6f:7f:a9:97:60:
7b:17:08:c8:34:69:75:10:c7:ca:72:c3:2c:35:3c:
00:cb:74:3f:45:41:f4:65:c8:0a:f7:82:ad:dd:35:
78:f8:03:ee:01:19:1e:42:cf:bf:ce:0e:a9:61:1f:
34:c5:39:0b:ed:b3:32:90:66:27:97:ba:c4:42:6d:
e6:57:92:a9:cb:8b:5f:8b:21:98:20:c9:e1:a0:ec:
5b:41:af:a2:44:ef:7a:8d:70:6b:ca:41:16:f0:e1:
ae:22:21:25:a1:9e:a1:8d:41:20:b6:b2:88:3e:1d:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:41:DC:E6:09:09:03:A2:FB:33:2E:D3:C1:12:06:58:17:1D:EE
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:59:b7:84:93:05:2a:1c:a3:1a:ca:9a:68:c2:a5:7c:d2:
85:d2:0d:1c:81:61:63:1b:13:6c:81:bf:54:a7:c1:ec:77:ef:
cf:35:86:d6:7f:59:db:96:1a:df:f8:c1:fd:ee:9d:9a:55:a8:
3b:45:5e:2e:71:64:76:8c:9a:d9:05:63:05:30:61:fa:2a:74:
65:b2:c3:d7:54:09:80:11:2a:bf:c7:8d:69:54:85:ed:6d:91:
f5:ff:f5:cc:6d:da:41:1f:d2:94:76:14:77:04:09:e3:22:f9:
fb:c3:30:8d:7d:9a:bc:1d:70:f1:ef:10:23:7a:61:25:54:6d:
5a:9c:d6:c7:a9:37:ef:cd:19:9f:e6:2f:78:e4:8c:6e:0e:33:
e9:32:c7:ed:8f:63:41:98:48:5d:22:51:ab:da:d6:5a:49:7a:
12:02:29:bd:0b:76:ec:74:09:d5:df:54:fa:db:5c:3c:fa:42:
ea:29:66:96:98:07:28:b4:56:9a:23:af:48:80:d2:45:90:72:
aa:df:9c:0f:68:71:35:bb:9e:14:c3:96:43:b1:7e:f8:ca:33:
69:7c:55:87:cc:9a:84:58:db:69:c0:16:2a:c5:c8:a4:3e:cc:
d3:c7:8b:20:f5:5d:5f:1b:89:f5:d0:a7:fa:86:2c:ae:db:9f:
72:df:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:42 2026 by rpki-client