Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: Iuo2GOIenE6/fb4p3MzWhcXgR4hwmLbgOLSplBglKuI=
Subject key identifier: F7:95:D2:EC:23:64:68:C9:FE:3F:B0:0F:16:23:94:52:2A:21:08:97
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019CAD596FCE86BBF06339985932A1593E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: HQ631/S6/I6fAYhcBIXEpjysMZyEug5mGAI0CTTO8l0=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6f:ce:86:bb:f0:63:39:98:59:32:a1:59:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=f795d2ec236468c9fe3fb00f162394522a210897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:06:64:df:0d:7f:8a:47:35:3b:e7:b0:98:
09:af:db:b7:4c:9b:a2:a0:11:a7:9d:3c:02:80:4d:
82:ef:a4:ad:d3:3f:4a:28:5a:78:91:e0:6a:d2:e2:
7f:71:9b:64:fc:7f:53:b8:61:10:56:4c:8f:4a:9c:
66:c5:8f:a0:cb:4c:fa:c0:01:af:b0:81:47:4c:1d:
15:37:7b:ff:9b:7c:20:d7:26:a6:96:27:bc:76:4a:
21:6d:3f:14:76:77:3a:10:48:36:46:34:26:12:78:
3c:66:f2:f2:b0:fa:57:8e:67:34:b3:18:95:79:61:
f5:53:74:c1:05:35:f3:79:fa:7f:71:64:45:01:4a:
49:4c:20:19:ea:3b:15:2d:7b:8e:ae:ce:5e:75:64:
cd:cb:1f:3e:8e:44:72:61:6b:36:a8:89:5d:44:ec:
3f:72:64:76:bf:0f:dd:39:97:48:ef:8b:59:bd:e5:
b5:5c:a8:7b:ba:cf:fd:3d:e5:4b:24:13:17:7f:92:
ae:e9:4b:3c:34:73:50:f3:9d:f9:13:5b:4a:68:ae:
d9:34:3e:0e:0f:50:f7:db:ab:a8:83:02:b7:65:83:
75:5a:1d:a9:ad:15:6f:45:ad:a1:ee:af:56:bb:7e:
46:eb:33:55:01:de:66:4d:78:1a:80:0b:d8:1d:ca:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:D2:EC:23:64:68:C9:FE:3F:B0:0F:16:23:94:52:2A:21:08:97
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:06:3d:54:27:9a:09:b2:8a:30:16:ad:ec:fe:ce:38:bc:3e:
03:58:31:6e:dd:dd:16:a5:20:bb:18:da:73:ee:87:c9:ad:f8:
44:48:08:2b:58:1f:5b:5b:58:dd:3d:03:64:31:e3:53:ec:73:
ab:98:1c:21:e1:d1:14:48:82:54:48:cb:46:61:3e:f8:5d:9e:
d5:15:02:0b:22:a3:4d:14:1f:6c:70:45:e1:95:46:1b:79:d9:
ab:db:d7:e9:62:e2:35:11:2f:5b:89:cf:49:04:32:cc:90:5f:
18:d3:58:8d:f6:de:da:da:d6:3c:ee:6c:8f:fd:c2:e4:8e:ea:
23:8a:f9:95:e2:2e:c7:41:96:ae:9c:e6:ae:61:59:f0:6d:5f:
08:1d:8e:24:f9:1f:72:af:83:11:5b:66:da:0b:24:e2:7e:cd:
33:4a:13:ff:45:60:8a:eb:11:29:d4:8b:ae:bb:94:43:77:e9:
8b:dc:86:ea:fc:61:05:93:60:e3:a8:4e:eb:a9:63:ce:c3:37:
eb:4f:e2:23:4d:73:2b:d0:c8:c5:0b:1e:33:e9:55:14:80:0b:
cc:fc:df:c5:73:8e:6d:27:88:18:5d:e8:bb:ae:21:83:ff:34:
79:8d:2c:62:ef:09:73:1c:9a:75:6f:1c:80:99:7d:29:46:49:
43:ee:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:07 2026 by rpki-client