Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: qA6T3b/y410uWlhZbsrg07D5ZzcLpTyF+hihYlhk4dk=
Subject key identifier: 9A:0F:8C:96:2D:11:A6:A3:34:1A:11:5E:15:AF:EA:D8:57:5E:5D:03
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019D2928FDE672BF0AB40565AB3C432C6B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 13C8
Signing time: Thu 26 Mar 2026 08:00:45 +0000
Manifest this update: Thu 26 Mar 2026 08:00:45 +0000
Manifest next update: Fri 27 Mar 2026 08:00:45 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: A7QsJbsQuT1B6OWZ+CtQ2j23M9bfuWhmMSC5at1KXy0=)
2: ChsrIe_cFwpAiazbN6fxpmLK7t4.roa (hash: LuQhPrdzKvZLID91e7AArGX99lU+Hh7zxpmaut21ffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:fd:e6:72:bf:0a:b4:05:65:ab:3c:43:2c:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Mar 26 08:00:45 2026 GMT
Not After : Mar 27 08:00:45 2026 GMT
Subject: CN=9a0f8c962d11a6a3341a115e15afead8575e5d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:06:82:8d:37:d4:7f:64:c1:4e:7e:68:90:
57:dd:c4:5f:8b:9d:2e:96:74:20:0f:27:39:cf:98:
d3:b6:19:6a:99:72:58:72:f2:73:f0:8d:5e:c7:8f:
21:bc:e5:2d:8e:73:82:9c:87:2b:89:32:25:61:99:
0b:bd:1d:65:49:07:d3:a6:d4:46:f1:df:fe:8f:b8:
b8:3f:9a:05:96:41:93:3b:f4:87:db:83:2d:92:52:
ac:4c:ef:e3:f5:94:7b:97:a3:aa:19:ce:cf:e2:b4:
fb:d7:65:bb:b2:6d:b0:98:0b:4f:39:7d:26:95:3c:
d7:83:d3:cc:c7:4e:dc:d6:95:64:61:28:44:11:c0:
92:57:fb:71:86:31:38:d0:18:1c:83:d8:e6:08:50:
45:7f:57:8f:63:bf:97:e6:36:b2:2d:8e:24:b8:78:
60:3a:e3:4a:01:b1:e7:85:20:14:45:11:a6:a4:a7:
dd:ef:79:ce:d5:77:64:12:c2:e7:93:0c:39:4b:aa:
cd:a2:c0:45:2c:9e:f2:a1:af:b7:11:6f:11:bc:d5:
19:dc:d8:ee:94:02:61:3b:e0:ee:ce:c1:f5:ae:e1:
23:0c:1f:18:0b:ef:aa:71:5a:d8:cd:85:e5:84:69:
e9:90:c5:61:5c:5e:ac:4a:d1:39:e4:b0:83:c8:a1:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:8C:96:2D:11:A6:A3:34:1A:11:5E:15:AF:EA:D8:57:5E:5D:03
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:46:90:1d:f5:f2:cc:84:a6:fe:63:b1:26:16:5e:14:7b:7a:
8e:28:b9:bd:7e:0e:68:b5:9c:50:71:e0:e0:11:0e:39:74:5d:
ab:07:ea:02:49:07:ec:33:fe:bc:f7:45:21:fe:3b:ac:a8:55:
18:12:2d:81:63:d2:3f:b4:6a:17:77:3a:d9:7c:90:a4:e1:ae:
92:27:f8:b2:40:8c:63:92:ed:a4:69:f9:3a:bf:aa:2b:5b:e4:
83:f6:62:0b:59:ac:74:74:ab:65:af:99:96:c4:a3:ff:0d:d9:
48:13:5f:40:bd:50:55:b4:97:66:73:55:f4:75:2f:47:0a:9e:
df:9d:ab:b6:10:4d:f0:6e:4a:68:8e:09:1a:90:57:16:00:55:
8e:ee:40:00:e8:ae:e9:f2:3f:ae:e9:02:03:a5:e0:5e:5e:a8:
79:6d:02:a6:8c:77:a9:c3:c1:6c:40:36:42:76:4e:31:de:19:
ec:11:10:ef:f4:86:c3:cf:44:d0:bf:3f:5f:12:85:58:8d:a0:
be:21:4c:90:ff:6d:3f:64:2c:04:d1:13:26:7e:70:11:a4:4d:
f6:05:f9:1e:88:db:32:25:d5:28:c7:4c:8f:b5:a0:cb:69:bb:
93:c3:2f:66:6a:cf:74:87:34:bf:dc:7e:29:b4:c8:2d:b1:e8:
30:e8:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:20 2026 by rpki-client