Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: mvTvzBP0VdFvF4T+rQaSe1sDY/zvWRwll8eKNW35hTk=
Subject key identifier: C0:28:56:C1:00:3F:6C:56:B1:41:40:21:6C:90:8A:A3:64:6C:FD:C7
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019CABA1EAC0159ECA8237E55AAAD0A857FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 17AE
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: 616iymhWimDGvXh0f7Cj+rEnnKLr6okEbGcJCMUBADo=)
2: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
3: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (hash: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY=)
4: xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa (hash: mQSj5E+L8Ak9ruHD0WWJ2/J6mb1ky6kbhBVPI1nZD5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ea:c0:15:9e:ca:82:37:e5:5a:aa:d0:a8:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=c02856c1003f6c56b14140216c908aa3646cfdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:04:19:43:b4:e4:de:fc:20:21:c6:76:95:
32:47:72:e1:d2:1c:46:10:b6:35:55:02:24:0b:f5:
1a:b5:41:db:55:82:71:fc:80:a5:51:1a:bf:20:a2:
0e:c0:65:82:90:ae:73:8f:11:4a:34:2a:a4:62:ce:
e2:db:96:93:ac:44:d8:ff:89:a6:01:f7:27:ac:44:
5e:f1:48:61:07:d6:a1:21:d6:a0:27:c5:26:54:05:
25:06:7a:26:4a:a8:9c:9c:4e:81:10:08:81:49:9c:
49:ea:db:e8:e6:9c:5e:fa:9d:f9:17:ad:72:b7:7f:
1b:9b:f7:b3:b9:6e:bd:ba:75:a9:62:a4:f2:b2:a1:
df:3d:5e:f2:e5:3d:17:7a:96:c6:af:2a:d5:39:53:
a8:fd:b8:91:8b:ba:5f:9c:8c:4b:26:7d:a8:61:81:
bc:d1:f3:55:e3:3a:b5:ca:ae:14:a2:0d:0b:68:5d:
8e:9a:e0:cb:0e:2e:bf:79:02:52:9e:ab:c0:a3:f3:
2e:0f:f9:92:b9:70:24:07:f3:c2:a0:75:36:f3:bb:
80:bd:99:3b:ba:ed:c6:bc:a0:7c:2e:f6:f0:43:01:
ee:09:ef:ca:a6:34:e2:9a:17:c8:40:50:ba:6c:6a:
18:7a:b0:07:46:62:77:91:a7:ca:24:8d:b1:ca:74:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:56:C1:00:3F:6C:56:B1:41:40:21:6C:90:8A:A3:64:6C:FD:C7
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:eb:b3:08:7f:78:a2:11:41:31:2f:e3:18:28:27:fc:a1:
78:89:c1:b5:44:4e:f4:86:11:da:e5:c6:15:a4:58:69:ff:98:
f1:ac:94:e7:a2:77:7f:5c:17:86:94:72:77:03:45:db:bb:ce:
8a:fe:15:49:73:a3:9c:1d:07:c6:03:8b:22:7a:40:b6:f5:71:
79:fd:7e:2d:f2:68:37:ad:d1:d8:b9:7f:6b:f7:ec:74:40:12:
7e:c7:95:93:be:56:d7:09:70:bd:d3:46:a2:30:6b:52:c9:6b:
d6:34:69:25:e1:36:f3:dd:49:00:05:cf:e5:e3:37:27:eb:f1:
53:e0:c8:a3:37:7f:5a:93:4f:9a:59:1c:87:8e:a7:62:0a:f0:
8d:c5:2c:21:24:16:54:76:97:30:d5:63:2f:c6:26:7f:c9:33:
c5:2c:d6:08:f4:31:26:53:9a:9f:58:fb:c3:ed:de:1a:09:0e:
51:80:02:da:c5:1e:be:6c:eb:5a:df:da:0e:3e:e8:c9:ff:ad:
96:79:68:d0:99:3f:8a:f7:c9:db:3d:27:b8:64:04:08:83:8b:
7b:82:a3:6a:98:27:9f:45:bb:16:1d:cc:69:1e:13:58:18:8f:
45:37:74:25:05:16:e0:6e:84:1c:f1:e3:82:2f:3e:fe:40:86:
f0:15:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:36 2026 by rpki-client