Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: 9KcN5nKDCADHFVi5sOy5HxpkymirFntx74Dj+PtgfGI=
Subject key identifier: CA:C8:DB:09:CF:66:76:7D:BF:92:1F:16:87:EA:F5:92:28:58:83:B0
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019D27E06FEA9A45EC63BA44163593323362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 17E1
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: BsjuwdH3c22e+d4Dh3KjB5CSdylvhicnqEeyEmJL/pU=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6f:ea:9a:45:ec:63:ba:44:16:35:93:32:33:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=cac8db09cf66767dbf921f1687eaf592285883b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:97:34:d0:d5:e3:8c:39:6c:10:a6:61:9c:
b2:61:ea:d3:ef:8b:c4:ff:cc:cb:e9:83:eb:26:0a:
8d:c2:28:03:97:d9:03:2c:d6:89:12:2b:fa:f9:77:
ab:14:0f:8a:e7:da:45:c9:78:6e:bb:b8:10:de:b0:
46:ef:d4:a5:32:5f:91:56:5d:68:4f:59:03:08:e7:
58:fe:fa:aa:af:9b:0f:3d:5a:d0:38:c5:4d:ae:ec:
f2:10:18:d9:5e:72:2b:ef:d9:21:8d:6b:60:0e:da:
07:6a:2d:af:15:db:8d:29:93:52:7a:3c:ce:b2:93:
7d:e1:05:71:c0:08:f0:a4:51:42:9f:a4:0e:b0:69:
be:c0:c9:6c:e4:e5:31:29:4b:8b:16:0f:c6:d4:4c:
36:e4:26:15:dd:da:c4:03:3a:d5:7f:25:16:99:85:
6d:10:68:02:a9:cb:36:7f:17:66:31:fa:9a:95:4c:
72:6d:2f:b2:dd:f4:8a:6a:64:1b:8b:46:60:e9:db:
16:d2:61:c1:19:27:ac:8b:c9:68:c5:80:22:7c:c8:
0f:af:dd:f9:55:5e:45:79:63:a2:da:09:74:ee:e7:
00:94:e0:29:b8:ec:b0:af:f9:e2:58:e4:3d:9f:64:
3c:c0:9c:10:09:06:1f:83:a9:28:5b:4d:dc:bb:bd:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C8:DB:09:CF:66:76:7D:BF:92:1F:16:87:EA:F5:92:28:58:83:B0
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:cd:5b:67:eb:01:16:e9:1e:3f:49:05:10:1d:17:73:1e:
5e:53:58:32:fb:33:43:6e:90:41:f0:67:a0:22:f7:21:ef:43:
7c:08:0e:84:43:76:b1:10:88:f9:c6:c8:db:03:0f:3c:25:32:
f4:74:56:4d:9a:71:63:0e:11:b6:f0:84:2a:79:66:a0:6a:1e:
fb:48:95:d4:c7:27:68:aa:19:20:ca:bc:89:ee:9b:94:3c:fb:
d3:b4:57:27:f9:45:9d:bf:35:bc:23:f3:0d:18:6f:4b:01:aa:
7c:a6:bc:ff:ff:37:ff:eb:6a:73:c9:74:99:23:ae:22:82:86:
b2:39:75:12:19:f5:7b:33:32:0b:4c:7a:7f:4a:32:76:68:e3:
29:51:b5:8c:99:57:b9:ff:22:89:c2:e6:1d:6b:4a:d3:3b:32:
e3:97:63:fa:64:ff:af:c3:6a:7c:a0:2a:16:d8:b9:8b:e0:61:
da:56:43:a7:55:3b:4a:2f:6d:a1:dd:a2:71:1a:d7:27:4a:dd:
e4:e2:04:f6:cf:4c:42:9e:11:9a:76:53:bf:68:aa:3e:04:81:
25:b6:f0:6b:0a:66:82:fa:15:f4:09:3a:e8:78:02:97:bf:aa:
1d:38:79:a7:df:ac:ae:15:ad:a0:5d:a3:9b:15:32:16:48:65:
9b:79:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:23 2026 by rpki-client