Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: 2y7bBGnFmkrdL1Y/yv9YLc03W/vjBU12Q0Bhu3V70FE=
Subject key identifier: 9E:2D:23:7C:B6:92:B1:3D:6D:05:E8:F8:79:57:0E:36:54:95:CE:80
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019CAC7E36D454FA8180A836AF6BC9D3EA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:18 +0000
Manifest this update: Mon 02 Mar 2026 03:01:18 +0000
Manifest next update: Tue 03 Mar 2026 03:01:18 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: DEiYmOLj03v91UE04+XCCq7lAOqZL/HyKF9NZvPgQYs=)
2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:36:d4:54:fa:81:80:a8:36:af:6b:c9:d3:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Mar 2 03:01:18 2026 GMT
Not After : Mar 3 03:01:18 2026 GMT
Subject: CN=9e2d237cb692b13d6d05e8f879570e365495ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:7d:d9:30:3c:b7:eb:79:1b:73:06:74:75:
21:9f:5e:7c:59:63:e5:fc:d3:44:c7:08:d0:c3:2f:
71:54:f6:18:99:75:fc:f4:bf:fc:52:82:61:da:97:
6e:33:9e:bf:25:4d:45:13:ed:31:9d:cc:8a:9f:c3:
97:00:66:7e:34:77:1b:36:91:94:b9:22:8b:ca:d4:
2a:b7:1d:7e:bf:ca:e9:7c:b0:ed:5c:60:13:f7:8a:
0b:a7:6e:f6:65:03:0a:82:f2:98:38:cb:bd:14:1f:
29:68:a3:1b:3a:ea:c6:54:7f:af:72:2d:8b:dc:da:
87:03:5d:3e:1d:59:05:fb:a1:a3:20:72:d3:60:55:
5e:bb:9b:a7:a8:00:5c:10:54:1f:ed:14:ce:4c:00:
05:45:ba:ba:13:a1:4b:d7:85:86:d4:27:d7:a4:ef:
01:c5:53:4b:2d:66:8b:07:77:73:31:2b:4f:15:ea:
bd:25:33:fb:2e:c5:6b:e9:a9:f9:64:f6:4a:82:ea:
6b:2e:b8:28:5e:aa:f7:2e:c6:20:d8:a1:0c:bd:57:
42:1e:f4:c0:5c:19:7c:79:15:84:8b:2b:b0:d4:54:
75:da:13:eb:73:a2:57:5e:4a:9a:9e:ad:06:06:28:
0e:5c:d2:6a:1a:33:b4:82:91:cc:17:61:94:ac:69:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:23:7C:B6:92:B1:3D:6D:05:E8:F8:79:57:0E:36:54:95:CE:80
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:8d:bd:20:02:e6:f6:44:1e:42:37:b1:19:3b:93:59:6a:
10:6e:99:fd:a8:7c:31:5d:3b:5f:f7:9d:ea:e0:66:3f:65:a7:
1e:d8:a0:f0:e1:bf:a0:72:35:6c:e8:00:3b:ca:06:ee:d4:a4:
7d:8c:64:83:d7:ac:39:10:a3:fe:e2:f9:aa:1e:d1:95:47:e6:
ab:b2:b2:f9:10:ed:74:d0:c5:89:fe:10:52:56:0e:fb:ae:57:
88:16:7e:00:14:d3:31:8f:f5:da:ef:84:ce:69:d4:ee:fd:5d:
1b:90:eb:1f:11:50:b5:07:56:45:c4:ac:39:c2:b6:14:3d:49:
ea:81:b7:9f:1c:8b:a0:98:d1:0c:e1:58:6b:c4:33:f0:eb:9e:
96:10:dc:42:37:7b:7c:a6:77:30:9d:7d:8f:63:2f:ce:16:ee:
18:72:71:81:20:ca:91:d9:1a:56:bf:bd:dd:dc:ab:91:40:b3:
f7:df:0a:fd:c5:64:08:d8:05:34:b5:1a:9f:ee:3e:72:b9:3e:
14:8e:f2:4b:6a:0c:97:f2:6e:c6:10:6d:c5:2a:b8:9c:b7:e1:
df:0a:c9:48:9e:9c:37:b3:eb:56:1a:31:45:cd:37:42:b4:5d:
9b:39:f8:29:76:28:31:90:8a:de:1f:bc:1f:a9:3c:13:0e:70:
9e:2c:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:00 2026 by rpki-client