Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: 03GarE1zCLmtBFpLaNYQ4WkME9fg1O/YzYqNOXhXCXU=
Subject key identifier: 13:46:56:34:79:2D:C8:88:84:17:A3:7F:99:E0:77:86:CD:9A:B9:86
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 019D26282612C60FCFF4A3FE9C586E1CC9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 0614
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (hash: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs=)
2: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: wgT190e+mq8O2KqWAYw6I6MeEcU0RVoR0qraCyaVNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:26:12:c6:0f:cf:f4:a3:fe:9c:58:6e:1c:c9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=13465634792dc8888417a37f99e07786cd9ab986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:f8:5c:b5:9e:ef:28:6d:65:3c:bc:e5:ff:
1a:9e:3c:72:63:c4:9f:b9:21:7d:65:b6:2b:88:eb:
32:b6:e8:b6:7c:3f:8c:51:75:ab:eb:80:36:ff:56:
5c:cd:95:a4:9d:3c:e2:e2:83:a9:c8:4e:ba:19:96:
76:8d:7b:1f:6a:33:67:a8:12:ce:d0:78:2c:4c:28:
06:aa:0b:0d:d3:50:5b:1c:9b:43:55:3a:5b:fd:d1:
0f:00:05:0c:75:78:74:6c:cc:c3:08:f1:b1:bb:58:
db:5d:d7:c3:f1:44:c4:ad:7d:0b:73:24:53:15:29:
7a:3b:fa:ec:bc:d4:78:91:9e:56:4d:f9:0c:7e:2b:
07:18:98:5b:f0:14:72:a7:83:20:72:c2:b8:a2:8f:
38:98:9a:6e:d5:0c:6e:4b:e4:94:00:a8:9d:d7:9f:
bd:86:76:70:90:84:89:f8:19:89:7c:7c:4e:95:6d:
c3:ae:9c:d3:c4:91:49:a9:e3:27:88:c0:af:7a:21:
06:64:4c:d2:40:56:d7:41:7e:fe:3d:b0:7d:36:b6:
ec:f7:ee:27:76:13:81:b9:ad:74:27:37:4c:df:75:
8d:ac:c1:d3:25:b8:ea:8a:05:59:76:af:b7:bf:fc:
91:ec:18:26:24:40:37:7b:61:40:e5:40:3a:4b:af:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:56:34:79:2D:C8:88:84:17:A3:7F:99:E0:77:86:CD:9A:B9:86
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:13:85:e9:05:4c:3d:9d:57:27:58:97:ce:bc:7c:6b:a5:cd:
96:bf:8c:1f:ee:f3:b1:8e:02:42:22:3e:43:69:71:a5:25:37:
95:0b:f2:0a:0a:e0:98:5c:a6:15:8e:d1:1f:4b:e7:0e:7b:b4:
94:0e:58:3e:0d:34:bc:f0:9c:da:23:4b:82:57:59:c4:fc:57:
9b:72:71:43:89:0e:ee:2a:03:11:55:ee:51:a9:fc:0f:2a:e3:
54:78:8f:00:2f:02:9b:0a:15:8f:e1:ff:96:f2:df:6e:7c:49:
fb:e5:17:bb:05:e6:d7:d3:86:9f:fc:a6:31:b8:5e:05:5a:ce:
5e:eb:a4:1a:d7:61:30:f2:94:17:60:de:28:11:26:1a:99:20:
8e:ea:34:7d:f1:af:0c:6c:94:09:59:22:54:8e:72:6f:2c:b8:
dc:60:0d:d2:60:1d:38:27:44:51:4d:3f:2b:cd:61:39:7f:3c:
ee:0a:b9:16:ab:bb:8f:c3:7e:8a:67:76:fc:b5:b8:d5:c2:cb:
74:2c:e2:d0:25:92:14:58:78:8a:ae:60:df:14:3e:f5:87:29:
0e:26:98:5a:8e:22:b1:85:f1:db:68:9f:34:1f:c9:2f:6f:1f:
06:70:d2:3f:bc:d0:17:98:e1:e7:f1:61:3e:db:14:06:43:37:
a2:46:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:18 2026 by rpki-client