Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: YmqHSeVSvFWBAwAX/cZpI4l7WnrFDexY+6PzHsaBeXE=
Subject key identifier: 51:80:B2:9A:5B:04:F7:20:43:04:28:FE:DB:ED:48:A1:70:97:4C:9A
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019D262801FFB0872E2CDB583E796AE5A2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0FE8
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: OEk8K8fsLF5HhplP27HM0U1qHG5EcNaTH6lsMd7wjQo=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:01:ff:b0:87:2e:2c:db:58:3e:79:6a:e5:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=5180b29a5b04f720430428fedbed48a170974c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:47:e2:ba:23:de:48:65:a1:c3:b2:a3:12:
11:db:d9:43:fd:8d:48:87:53:e6:a3:9c:15:b8:73:
62:2e:59:bf:bc:d0:b3:d7:4f:d6:ff:40:e9:6e:85:
49:9f:d3:97:75:7c:8b:c1:b3:5e:f2:cb:6d:42:ea:
48:37:16:79:98:8c:8e:5e:17:ee:ba:14:a8:d7:76:
a5:dc:84:44:5b:80:f8:b3:6b:90:25:85:04:3b:ef:
6f:9d:88:2b:2b:44:cb:1b:26:92:fa:96:19:28:64:
ce:80:c8:0d:d9:42:b7:e9:89:13:56:8d:66:fb:ae:
2c:e7:93:a4:19:f4:d3:ea:ee:f8:4c:72:c5:12:48:
7b:15:50:cd:52:79:e2:fe:9e:2c:f9:93:f0:12:62:
65:0d:9e:3e:56:d4:95:af:8e:c1:e3:29:4a:b1:19:
15:94:43:db:b4:57:1f:aa:a2:d3:15:e1:21:72:fd:
9f:91:64:92:94:f4:56:b0:2f:03:e0:d7:d4:bf:2a:
be:49:96:cc:95:f5:96:03:ad:a6:d5:66:ab:ba:89:
84:c8:c3:58:67:c3:b3:7b:73:8b:ce:d6:a0:8a:db:
e9:2a:66:c7:26:b1:22:5e:cb:9c:59:55:ac:d7:1d:
f9:a9:41:33:83:b2:b3:cc:3c:68:27:f6:7f:5b:d3:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:80:B2:9A:5B:04:F7:20:43:04:28:FE:DB:ED:48:A1:70:97:4C:9A
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:93:53:eb:0a:5f:ec:67:17:aa:df:fa:99:f3:30:cf:2b:
b1:fa:52:ab:90:a6:08:60:91:f3:36:f4:b4:ad:df:b2:31:75:
2c:a8:f2:58:97:57:a8:6d:7d:27:84:e2:31:ee:b5:28:16:79:
0f:59:c2:c1:02:a4:d3:10:d9:e8:92:60:1d:26:71:72:cf:d1:
2e:db:9c:82:6e:60:2d:2d:95:07:f9:54:7a:13:d6:d0:2e:a8:
66:d4:45:14:70:c9:a8:cb:dc:e7:7e:fa:7a:59:7d:d1:20:46:
d1:84:55:14:cf:fb:fe:3c:c7:80:29:60:1e:69:9b:37:11:6b:
de:5b:b9:f2:cd:bd:47:c1:11:ba:5b:d9:2b:22:19:23:6e:73:
4e:31:fc:42:d7:49:c1:b0:85:cb:19:09:8e:ca:a9:d8:70:5d:
78:f4:79:b4:a2:2a:d7:0e:1d:94:b8:46:26:c5:6e:cd:ee:3f:
66:f6:ed:11:61:f4:e9:e8:d6:33:ae:f4:55:56:b7:cf:70:c9:
da:7d:ef:28:b8:93:80:ae:d4:f4:bf:9e:b9:fa:7a:a8:fa:8a:
30:0a:be:27:e9:c4:3c:87:36:d1:37:27:21:e5:1d:fa:e5:d4:
df:11:1d:0a:26:f5:0c:d1:ae:ec:4a:3b:68:75:a6:a1:30:7c:
d7:63:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:02 2026 by rpki-client