Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: Io08kO7oEEsE9yBJEbko/MuJsmvDX+GcUGcDtlGVKl4=
Subject key identifier: 58:37:B5:BF:D9:90:E6:90:9A:2D:AF:77:31:44:0C:FA:6B:5C:26:A1
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019CAFB5A5030A4E4E5D77E61EF78328033C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: CF
Signing time: Mon 02 Mar 2026 18:00:42 +0000
Manifest this update: Mon 02 Mar 2026 18:00:42 +0000
Manifest next update: Tue 03 Mar 2026 18:00:42 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: OSkt3l8OLNrYl4AAP4EwfxTCgOht4ju3mrh2wdirgHg=)
2: 8hIPh9NC_tu8aJZGw_JlJDyobA4.roa (hash: WMHOYzoK2CldpXzLmVRcmE7+ZPDrZuaCYKkzPqQxl2I=)
3: Z3gEPjuGoaYcAc2mKEaTF07YHOo.roa (hash: drUQc/cIGCRZlaPcgP1i77u2yGDeJbZ8Lsn9UZSA/uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:a5:03:0a:4e:4e:5d:77:e6:1e:f7:83:28:03:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Mar 2 18:00:42 2026 GMT
Not After : Mar 3 18:00:42 2026 GMT
Subject: CN=5837b5bfd990e6909a2daf7731440cfa6b5c26a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:02:75:8e:58:5c:2b:2e:5b:f4:ea:11:2f:
5d:ef:98:2f:a6:19:70:de:d9:74:25:b3:0f:55:d7:
db:90:ad:5d:d1:4f:82:57:e2:57:d3:b2:25:12:eb:
d7:57:a9:71:45:48:e9:3a:84:82:57:0c:d1:cc:96:
8b:6a:0b:a9:4b:ae:ad:9e:b4:11:0b:b1:01:97:75:
bf:53:8e:1c:b0:b1:66:fc:f0:23:89:e9:e7:d1:43:
51:61:0d:e3:17:ed:86:79:82:77:f5:fa:2c:ab:de:
83:ce:66:a4:a6:8d:36:14:70:68:f6:ac:3a:28:9b:
bc:08:fd:28:15:08:33:23:67:ae:f3:3c:b9:a0:19:
69:87:2a:99:30:01:fa:5b:a0:68:19:ff:1f:a6:77:
06:d7:55:8a:81:e0:4d:2a:be:f7:5c:65:2d:3b:f6:
81:db:4f:b3:95:67:bb:bf:3e:e6:e5:1d:a5:3c:bd:
9e:2a:47:7f:81:9c:18:ae:fb:f9:85:96:2f:73:30:
19:bc:aa:fb:d3:60:28:63:01:81:ea:56:fc:7c:b7:
28:3e:ac:3e:1e:4f:33:12:af:75:1a:cb:bf:b2:db:
d8:f6:61:8e:f3:49:1e:f7:af:ec:3b:29:b3:55:17:
41:4c:73:4d:9a:c6:25:78:10:d5:3c:04:6d:56:cd:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:B5:BF:D9:90:E6:90:9A:2D:AF:77:31:44:0C:FA:6B:5C:26:A1
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:05:b8:e6:55:98:56:1f:54:0a:c6:3f:0e:10:48:b4:64:
fb:3b:50:7d:b7:4a:41:e4:fb:42:a8:c1:4b:74:e2:25:4c:7d:
fb:7f:e0:d1:31:0f:06:e2:64:94:11:73:1c:50:4b:17:33:42:
42:65:d0:06:5e:7d:0f:11:ad:50:98:f0:18:63:a9:ff:a0:bd:
40:23:29:af:de:7a:e1:01:7c:d1:7a:3f:f5:b2:0c:5c:ff:04:
af:8f:87:ff:b8:50:9c:d8:e1:4a:09:44:16:b0:3d:6c:42:54:
4d:3f:b4:9d:d9:d2:88:70:34:30:db:18:6c:4b:f2:e8:cc:db:
fc:b0:b9:27:ab:78:42:cd:9a:ed:51:2b:25:79:fc:56:6e:de:
5a:ef:e6:de:cb:cd:c9:07:d5:f3:10:df:ba:52:d5:5d:89:3b:
7c:22:71:7e:19:15:74:0d:8f:18:5d:f8:41:d2:24:bd:bd:d0:
5f:bd:76:70:48:2e:27:22:10:6b:4c:ef:82:ac:c3:4c:44:88:
84:f1:fc:e6:b1:23:d7:15:ca:74:34:d6:f1:f1:32:f3:f9:8d:
e9:58:c0:68:0a:ab:1b:3a:ae:70:31:b1:93:ff:9d:79:de:4c:
77:42:8d:02:fb:91:90:19:72:5e:ad:c2:20:08:00:98:8c:a1:
e7:b4:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:20:34 2026 by rpki-client