Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: koPZDjUfLUM+EViPw3wStZ5QZbJiQvC9QV4sQuEaNJ4=
Subject key identifier: 94:B8:AC:0A:42:34:73:81:8D:6C:C3:39:99:5A:49:67:A8:99:AA:E2
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019CAD90812D7A654512029A97508426337B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0EBE
Signing time: Mon 02 Mar 2026 08:00:54 +0000
Manifest this update: Mon 02 Mar 2026 08:00:54 +0000
Manifest next update: Tue 03 Mar 2026 08:00:54 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: 0R2KjtuHinyTWdXDawVQtaswQck2Bj7E5GpGKqSmuUo=)
2: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:81:2d:7a:65:45:12:02:9a:97:50:84:26:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Mar 2 08:00:54 2026 GMT
Not After : Mar 3 08:00:54 2026 GMT
Subject: CN=94b8ac0a423473818d6cc339995a4967a899aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:ae:a8:c1:6e:d1:6d:29:0a:a7:65:ee:cc:
b6:fb:88:46:7a:06:de:f9:0d:6a:09:de:6c:b8:6e:
d8:c5:e0:1a:fe:fd:3b:9b:f1:38:8d:38:e6:04:c0:
79:55:0d:65:e5:69:61:c4:be:75:6b:26:33:c5:27:
e2:25:5a:8e:46:60:d8:f9:14:89:dd:26:3b:c4:c6:
ba:2f:9d:9c:c4:6a:bd:24:ff:ef:84:9f:8a:75:f5:
d3:b5:4c:6f:fb:e2:22:be:66:30:66:0d:54:7d:3e:
19:96:f7:77:2e:0e:86:c9:17:cd:59:cf:5a:8a:c7:
d4:46:ae:3f:c6:c3:94:0f:69:71:b7:e9:41:a0:58:
ba:65:9a:5b:3f:9b:ab:cf:6d:05:3f:9a:57:9d:65:
44:50:8d:04:7d:aa:6c:87:95:0d:90:37:4a:e1:82:
6c:47:e7:bb:d6:f4:89:86:d0:ea:35:64:bd:75:e3:
88:5a:44:26:86:03:41:85:e8:ce:1b:d2:9c:83:77:
38:83:38:58:1a:74:c4:99:f5:f1:79:5a:25:be:ce:
14:bc:b3:63:83:6c:ad:f7:d3:1a:ec:8e:e6:ab:79:
05:dc:42:24:d0:2c:a2:28:27:a6:0a:15:8e:ad:83:
cc:40:d7:7a:44:4e:a9:7b:88:77:d9:3d:34:5c:46:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:AC:0A:42:34:73:81:8D:6C:C3:39:99:5A:49:67:A8:99:AA:E2
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:13:1c:d4:36:f0:53:1c:37:03:53:d2:da:1e:fe:5e:54:
5d:3e:f8:a2:d6:24:33:0c:eb:13:64:e4:17:61:06:0f:dc:14:
76:bb:9c:97:b7:61:7b:96:43:d3:26:e0:c2:0a:57:7f:9b:37:
5a:9e:ec:b9:77:84:2f:50:eb:94:e1:21:45:8f:c4:63:e2:03:
4a:dd:22:2f:42:20:bd:e5:be:a8:d8:cd:2c:74:4c:5b:44:c9:
d6:b0:4a:65:50:33:46:00:2a:f0:c1:4d:8a:db:e2:e6:2e:0e:
fa:13:76:49:6e:aa:86:f8:f8:81:56:ac:d0:6a:86:2c:23:71:
b8:d6:fd:d8:59:9f:b6:5b:ba:f7:6f:48:0b:3b:d8:dd:cb:11:
46:63:c4:bb:75:d0:77:21:b7:a4:e1:7a:9a:f9:c5:dc:29:57:
2c:da:bb:83:fe:02:cd:12:46:2b:56:be:44:27:37:54:eb:40:
57:f0:5a:b3:d6:5a:ec:b5:ca:6f:4c:39:b2:bb:40:fd:9a:27:
34:d1:6a:b9:e0:88:55:43:47:99:94:0c:36:58:9f:dc:6e:84:
65:a4:30:bd:bd:c4:27:5e:66:4c:1a:c0:4a:2a:07:2b:8e:e6:
15:92:0b:fa:9f:b4:95:6f:28:a1:20:0a:56:93:a3:f3:cb:2a:
49:40:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:05 2026 by rpki-client