Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: vnX9y7fL+HLDscCRsPpIB9Ev393cLYH+4lpeaoWmc8E=
Subject key identifier: 8C:3D:FE:2B:9B:53:F9:0B:7A:95:D0:E6:98:DA:07:43:40:25:77:5E
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019D988653B66D8B859C4943B2A5DD14DCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0F39
Signing time: Thu 16 Apr 2026 23:00:33 +0000
Manifest this update: Thu 16 Apr 2026 23:00:33 +0000
Manifest next update: Fri 17 Apr 2026 23:00:33 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: iA+Ee0uoDWB1By2yORyhRFSDPfmEzeSXThVA790iQyY=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:53:b6:6d:8b:85:9c:49:43:b2:a5:dd:14:dc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Apr 16 23:00:33 2026 GMT
Not After : Apr 17 23:00:33 2026 GMT
Subject: CN=8c3dfe2b9b53f90b7a95d0e698da07434025775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:3c:02:4f:60:85:f0:c5:07:db:1d:fb:78:
c1:ea:07:57:27:ed:c4:e7:e0:31:3a:c2:b3:c9:02:
47:3a:f8:2a:4b:2b:aa:a7:e0:f0:f3:b3:d6:15:39:
a5:fd:6e:ec:fd:0b:1a:6f:a6:b9:08:2b:25:d7:b7:
70:c8:ef:82:47:ee:ca:d4:39:68:c9:b9:c5:f2:73:
b3:91:3e:ad:8f:a1:a8:97:eb:cd:b0:4c:eb:07:e6:
a9:11:66:65:6e:b6:6a:58:9f:b8:be:c7:c4:56:74:
d4:2e:2f:b5:5f:50:8d:9d:0e:8f:48:5b:92:4d:98:
e7:76:42:72:db:3c:c6:1f:07:f6:c9:ab:3f:7a:27:
c3:c6:43:3d:29:2e:1c:7a:ae:1d:e2:8a:41:2a:15:
e9:5c:9b:11:a3:ce:dc:8e:aa:0d:6f:e4:bd:1d:44:
be:2e:ea:67:82:63:de:84:83:08:f4:37:be:5f:62:
f1:08:f4:7d:45:55:98:28:1a:57:be:c1:9f:14:80:
64:23:10:4b:b3:45:47:ce:ef:44:32:72:fd:28:dc:
05:5f:a3:b1:bc:d9:f2:10:e9:59:5b:62:a1:b6:4d:
7d:ea:be:f3:4b:6d:63:71:05:38:4e:30:b3:0a:3e:
e5:37:e2:e6:04:83:9b:42:e1:3b:3d:ef:aa:89:bd:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:FE:2B:9B:53:F9:0B:7A:95:D0:E6:98:DA:07:43:40:25:77:5E
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:73:a4:b1:4c:9e:a1:99:66:85:f3:92:f9:cf:30:ca:5b:
33:2a:11:9c:3e:2d:d4:dd:a6:8c:e5:d9:95:7c:9f:71:0b:69:
22:b2:d5:1c:3b:b6:cb:d6:43:2c:55:69:cb:9a:43:03:a6:b0:
cd:dc:e1:31:0e:1d:16:5f:42:3e:76:61:45:3a:94:46:06:c0:
62:c2:0b:d7:76:36:bb:98:a7:eb:f2:ec:af:43:04:b6:8e:a9:
49:91:b4:5e:58:c3:86:fc:2e:21:fc:4e:6d:9e:37:15:08:a7:
2d:45:b6:7c:43:17:bc:f7:74:aa:7d:19:05:01:ae:b8:c5:4e:
a6:22:9e:cb:a9:ab:9f:42:39:7d:e0:44:17:f5:78:5b:3a:78:
d3:2f:4d:ba:3f:53:33:ae:f2:7d:e0:76:4f:49:2a:86:30:32:
9f:6a:bb:bf:1a:f6:f8:6d:7f:88:33:13:86:7c:ba:9d:a0:e4:
5d:36:3e:8d:55:a6:97:9d:9c:7b:17:fc:e5:bb:f4:78:2c:fa:
49:4d:cb:a6:4a:b1:1a:8f:ae:52:e4:77:9c:96:1d:d6:22:70:
ce:71:24:45:ab:ab:48:72:25:35:12:05:d5:49:96:ba:3d:14:
da:1f:47:8c:e1:1d:eb:e0:6b:4f:64:26:74:1b:77:28:08:4e:
60:a1:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:50 2026 by rpki-client