Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: u6IQhZcSRxgzeJFvFaZ8j9e3OHYvdMPCuPWwY7VP9mY=
Subject key identifier: D3:91:68:FA:59:23:47:21:B7:F9:76:4F:F0:BC:77:2C:E2:22:EB:EF
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019D284E0500E9E55747D14FF171A4CEBCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0D16
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: 3BS9q7NBeJaE0PMl/SmbGSFnWzTpOGzGx4H5fUUlZkI=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:00:e9:e5:57:47:d1:4f:f1:71:a4:ce:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=d39168fa59234721b7f9764ff0bc772ce222ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:4c:dc:a6:10:c3:1b:31:37:b3:e8:1e:c2:
0d:e8:23:07:f7:84:4c:09:fb:a2:d6:65:fd:91:15:
25:1c:23:03:6e:dd:b7:ea:4c:6f:c3:73:7a:3d:3e:
57:4f:cf:7f:f5:7b:ea:d3:43:08:ad:35:4b:66:ce:
ca:ab:b7:49:2e:b9:77:e1:46:73:6d:01:fb:f6:6b:
2d:b8:11:89:a0:75:c0:fe:d6:7e:03:ef:6c:40:af:
40:d6:06:43:d4:26:51:73:87:75:27:8e:27:44:2f:
d5:8b:f9:96:cb:04:6e:d9:73:19:74:32:39:2d:1f:
f8:9b:41:d1:d1:68:6c:62:cb:d1:ed:3f:cf:04:4e:
6f:22:e8:cd:85:e1:aa:bb:19:3c:c8:08:77:d6:2f:
ed:b4:70:f2:ae:7d:a6:31:e8:e7:14:41:b0:f4:83:
6c:fa:b1:b5:bd:72:c9:17:b5:a1:ac:53:f5:1e:d9:
27:63:53:23:58:50:49:76:92:0c:cc:ec:df:ec:ca:
f2:d6:8c:c2:d3:7c:28:69:24:c5:8a:f4:2b:4c:74:
7d:ef:46:f8:20:1f:4d:dc:7b:eb:55:13:bb:f6:a1:
c6:47:9d:e1:e8:71:28:56:85:a9:00:80:a7:1c:02:
f3:be:b5:41:1b:65:5a:bb:55:34:2a:94:4c:5e:78:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:68:FA:59:23:47:21:B7:F9:76:4F:F0:BC:77:2C:E2:22:EB:EF
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ec:38:ca:19:b0:63:19:aa:ea:3b:28:cf:0c:6b:06:b0:fe:
86:d8:a1:a6:68:a2:2f:dc:ba:b4:4a:45:69:e3:fa:8f:16:82:
01:7a:88:3a:b0:0c:6c:d9:47:33:72:75:ba:de:f6:24:90:fc:
e8:72:9b:48:a4:4b:84:6e:ff:bc:16:34:2a:dc:cd:da:65:b9:
b5:c4:c1:73:e5:5b:e4:ce:a7:64:a6:6f:a8:b4:e5:32:a5:60:
b4:6e:8e:7f:f2:7b:a3:21:ff:d7:46:a5:a0:d2:31:50:05:b7:
6d:f8:a1:d3:d2:5a:54:ba:8a:06:eb:e3:45:d3:5c:92:5c:02:
06:75:28:a6:e4:c2:91:15:f8:cd:8e:d9:51:3d:60:e2:4f:ea:
25:c1:86:7e:bd:1c:d8:0f:47:a2:17:f7:5d:15:cf:72:1b:b1:
6b:ea:e2:59:39:fc:2d:10:31:d3:bc:78:57:84:99:65:67:86:
21:4e:e1:c3:97:a9:0e:3e:9e:97:dd:15:d8:c3:9e:f1:1c:6c:
55:d2:7c:6a:55:cc:e9:e5:d0:63:91:43:97:c4:23:11:fb:23:
a7:6c:fe:60:3b:a7:48:87:ea:09:e8:3e:42:42:8d:09:a2:48:
33:b0:a8:ec:69:30:19:d6:6e:16:9d:e6:c9:06:04:38:53:53:
5f:44:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:22 2026 by rpki-client