Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: IMwfzrLBpU5fFZeb02MLGdy6GEbjbIMx+YzuCBNJTpQ=
Subject key identifier: 27:67:46:9F:69:B7:1C:4F:EA:36:4B:32:36:A5:5A:65:C9:20:14:C2
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019CAAC69240639AD3D5877379F5183EB403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 161F
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: Y/1aniFLXkRDnECAlTNRJH9WY54XuOKvAwazOce3cNE=)
2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:40:63:9a:d3:d5:87:73:79:f5:18:3e:b4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=2767469f69b71c4fea364b3236a55a65c92014c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:55:28:24:0d:55:3f:7e:6b:90:2d:b0:59:
31:99:45:be:d8:b7:66:71:99:de:41:4f:93:7f:c8:
90:2a:8d:61:2c:49:2c:10:92:91:bd:09:4a:43:83:
61:c2:c2:ac:f0:f0:50:fc:fd:4c:d7:92:2a:c3:26:
48:31:6a:b1:fe:b9:df:bc:30:bf:04:9b:e2:6c:fd:
1d:00:e1:6c:a0:02:47:ec:3f:81:d6:43:9a:50:50:
10:d6:f1:82:c0:83:93:1f:8b:1b:a9:53:6f:c9:69:
5f:da:f9:25:59:6a:5d:cf:fb:cb:d0:82:71:24:82:
d9:b8:7f:98:2c:6a:6b:e6:9a:ba:18:56:0e:69:aa:
fd:f0:03:a4:79:ec:fe:60:81:3e:61:f1:54:96:b9:
49:e5:27:bc:89:01:76:f0:e4:cf:29:79:53:eb:ee:
aa:66:da:22:31:57:fd:68:81:24:06:42:06:58:70:
12:1c:a7:0d:e9:1c:ab:bd:0f:5f:a9:6b:0e:06:fe:
0a:7e:df:23:d6:89:68:c8:6d:33:c9:82:ac:6a:ab:
de:6b:8b:96:c8:3f:4b:d2:7c:95:81:3f:94:c8:de:
da:82:54:f2:9e:6c:e1:90:46:c5:8d:d4:f6:58:21:
c7:31:bc:39:d9:29:3c:a9:38:e8:e0:72:54:ed:f8:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:46:9F:69:B7:1C:4F:EA:36:4B:32:36:A5:5A:65:C9:20:14:C2
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c0:41:73:68:af:6e:3c:ae:05:01:69:9a:24:dc:f4:61:93:
f7:f4:ce:04:73:7d:39:fe:98:5d:33:21:9f:26:ae:6c:f1:55:
19:b7:d0:1d:83:0d:d0:d6:61:5d:e8:11:26:f3:e8:20:31:68:
36:c6:fe:91:12:6f:76:38:71:13:01:52:86:90:cb:f2:fa:2a:
87:73:2c:ea:5c:6c:68:4d:df:d1:03:e8:1c:68:01:de:16:7c:
17:43:2b:b2:cd:1e:c0:6c:73:73:79:d3:e2:05:15:39:5e:4e:
a6:c7:69:01:05:c1:7e:92:82:0f:82:97:a1:49:e3:48:3c:ba:
d7:20:c1:2c:eb:8a:b5:e3:c0:3d:af:a8:a7:79:4a:24:06:0f:
21:8c:eb:02:1f:09:52:de:ee:91:d9:c9:bb:8a:f7:8a:3f:ba:
72:05:4a:0c:e8:fb:ee:71:8b:11:0a:59:77:54:bb:25:e3:54:
6b:49:89:5b:c2:f0:2a:ee:3f:d1:4f:7e:86:e4:9d:44:57:12:
32:9d:3e:a1:54:4a:d4:52:4a:63:a5:60:40:64:fb:e1:b8:9c:
d5:fd:73:f5:9a:47:e3:74:ac:71:2a:a0:ec:5f:14:0a:c9:a9:
28:a8:f2:06:79:44:3d:cf:3c:15:a3:ee:ba:16:e3:27:19:27:
a7:e0:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:30 2026 by rpki-client