Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: Hz3z/4s+j25RjuhgPdJrqdc50aGbyY8WOlbpgBr/gBw=
Subject key identifier: 97:A5:5B:ED:B2:20:87:E7:86:3F:ED:B7:0E:F6:B6:2A:8F:99:FA:8E
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019D277257469EB90D54309A206F61866C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0CFC
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: 8vx6sFIyO8G6dnfZfMnOpxGABF0Y9PlDEmFrk2rhxtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:57:46:9e:b9:0d:54:30:9a:20:6f:61:86:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=97a55bedb22087e7863fedb70ef6b62a8f99fa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:86:cb:83:95:2f:42:68:27:9d:55:74:e6:
36:64:8d:22:3b:c7:4d:fb:e8:cc:55:a4:71:5f:09:
71:cc:3f:45:1a:3e:2e:b1:fb:d8:89:32:17:41:b2:
6a:61:de:aa:cd:7c:b3:85:06:e4:bf:04:4c:35:8d:
b7:99:c5:c6:7b:35:a7:44:99:73:7b:97:2a:28:c7:
8d:55:78:41:8d:08:c7:e3:a1:63:2d:6f:06:8d:7b:
c3:6c:bf:8c:9c:ba:be:5d:15:a1:71:dd:63:87:24:
0a:d9:10:d6:40:8d:69:7f:1f:f8:87:ea:a6:81:28:
36:b6:88:9e:bc:a3:35:6a:a1:e2:d4:bc:64:2b:84:
da:05:2d:49:3e:11:d1:9e:84:c6:90:4d:14:a2:37:
28:34:28:4f:69:c4:38:82:c0:0e:0e:ec:90:52:55:
3f:cb:35:64:60:17:fd:3e:47:75:c1:3a:3a:9e:ca:
1c:ac:5f:a1:69:74:44:6c:36:c7:7b:11:db:f4:0f:
ce:3a:41:3a:3c:13:c8:be:40:e5:ea:df:d7:f0:09:
8f:01:88:08:2e:7a:d5:4d:c5:9e:23:d6:76:cb:c3:
6f:f8:69:e4:e3:f0:ff:c9:44:3d:21:2b:02:45:21:
ba:58:58:89:ca:c3:20:35:67:55:61:c1:04:e4:cf:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:5B:ED:B2:20:87:E7:86:3F:ED:B7:0E:F6:B6:2A:8F:99:FA:8E
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:33:9a:85:a2:51:c3:ce:cb:72:0b:17:7c:df:e9:90:26:f8:
41:40:3a:eb:32:bb:94:4e:b2:9e:cb:82:7b:c1:60:9d:89:a5:
f5:de:b3:54:75:fc:0b:40:ab:56:1b:58:07:d4:4c:cd:c0:3c:
e7:01:95:cd:a2:f9:11:82:ab:d1:e6:db:4e:01:47:58:46:48:
46:f0:1c:e1:64:bf:44:4b:8b:b1:a2:e8:8f:b8:89:3c:89:98:
61:05:61:8a:2a:8b:98:b5:b5:88:11:8a:42:55:a7:66:82:79:
df:27:72:67:53:5e:cb:64:02:de:e6:05:47:33:e3:b5:7d:62:
61:96:fc:9c:3a:c8:28:61:36:b9:a5:15:7e:bf:16:b3:f0:01:
40:21:41:09:1b:c8:d5:95:50:7d:c3:84:5f:a0:19:f7:c3:07:
f1:24:26:f8:36:30:0b:1f:32:e3:95:0a:3f:3e:a9:cb:b8:81:
52:1e:76:a6:62:7b:ed:10:01:5d:9f:67:1f:27:22:85:26:c1:
57:6a:d3:c0:93:be:70:c7:85:53:06:c5:cd:9c:d5:1f:e7:4a:
70:c8:31:78:d2:27:35:a8:68:f3:26:b1:bb:32:76:76:97:e3:
4f:61:14:c2:b6:ac:03:c3:f2:9c:58:56:8c:71:9c:fa:82:bf:
d2:b2:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:08 2026 by rpki-client