Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: oJQ3lhlRfk21L2lhNQdNU4KL9NBHl3UHGqFif0jbIKU=
Subject key identifier: C7:1F:21:1C:2B:FF:F7:AB:66:B6:58:0F:92:1C:0A:19:3D:CD:15:6B
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019CACEB9DA2AAD53AE58895E6BE61BF887A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1788
Signing time: Mon 02 Mar 2026 05:00:48 +0000
Manifest this update: Mon 02 Mar 2026 05:00:48 +0000
Manifest next update: Tue 03 Mar 2026 05:00:48 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: tLK+BgkbCTzVudqo3YaXtYqq36szsy0+Xn2/g7HeaYc=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9d:a2:aa:d5:3a:e5:88:95:e6:be:61:bf:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Mar 2 05:00:48 2026 GMT
Not After : Mar 3 05:00:48 2026 GMT
Subject: CN=c71f211c2bfff7ab66b6580f921c0a193dcd156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:b7:50:09:bb:43:0e:b6:9e:6b:16:95:11:
25:64:fc:13:a8:e1:9e:e2:ef:4b:e1:8b:87:94:55:
a3:67:5b:23:7f:d0:e3:09:a5:c7:8b:6c:35:3b:9c:
21:cb:8c:85:c7:38:e7:8b:7a:94:34:ee:a1:58:8f:
b5:fd:34:af:3c:4a:3a:e4:ba:3b:c2:b6:42:00:35:
bb:34:57:a0:b8:d4:d0:7d:66:22:c2:32:70:24:bc:
32:9f:83:70:90:b8:b1:d9:f0:c6:43:a5:22:fa:32:
3f:b5:0f:2a:a1:b8:44:84:9b:5e:3b:d4:75:0a:0e:
cc:db:ed:71:64:d0:e4:68:65:e6:78:3c:6c:cd:64:
32:f7:3b:bf:fc:20:55:cc:7b:50:b5:73:4c:f1:0b:
d5:a6:71:23:d5:c9:fc:79:08:f3:a1:9f:68:4b:12:
0c:3a:59:f8:cf:35:de:9c:e4:a2:b2:43:e9:63:77:
d8:5d:8e:14:02:dd:dd:fd:9d:35:67:f6:58:d8:e1:
40:2c:2c:55:33:7f:be:aa:51:d1:54:18:da:a3:6f:
49:da:fe:ba:13:66:0f:9a:f5:a7:71:0b:01:91:32:
22:97:40:c1:2a:ef:2c:ce:35:01:41:28:da:a6:d0:
8e:e9:ed:94:7b:ef:e0:c5:03:07:d2:a6:01:42:36:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:21:1C:2B:FF:F7:AB:66:B6:58:0F:92:1C:0A:19:3D:CD:15:6B
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7d:a0:97:f7:63:af:e5:62:b0:85:6e:8f:27:55:e8:bd:4b:
5d:ac:13:62:23:6d:18:8c:81:9d:8d:41:92:65:43:41:38:bc:
de:c2:2b:94:41:db:4e:7c:f7:45:df:f8:07:78:82:3b:55:a4:
cd:75:18:a6:b6:de:39:01:51:97:35:06:b2:c7:3b:f6:09:70:
4f:48:42:33:9e:62:80:0d:19:06:e8:2c:ce:3f:6d:7c:5c:78:
47:b9:93:fd:d2:13:7f:93:55:6e:d5:ec:0f:d0:19:b5:6a:cb:
06:a4:a2:e8:46:1b:d7:4a:33:fc:d3:8a:7a:f4:78:92:ae:6a:
97:7f:04:12:0c:da:28:30:2c:d9:cf:cb:20:ad:d4:d9:30:4e:
2b:0b:7c:fa:40:fc:c2:13:ff:1e:c7:5c:c5:88:7c:79:b7:21:
ec:b6:bc:31:7c:bc:27:2c:e6:ee:3f:0e:0f:76:cf:56:40:69:
59:4a:03:0d:27:9b:e8:81:35:50:f3:e1:39:5a:42:c5:4d:ea:
49:1d:9f:bf:d9:6b:35:9c:a8:c6:8a:ba:57:5d:f6:84:4b:ab:
ca:31:da:87:22:61:53:d5:b3:ba:5d:b1:87:6d:0c:b5:31:c5:
26:23:31:db:57:37:96:6f:bd:ae:14:87:dc:c0:33:64:96:6f:
18:62:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:50 2026 by rpki-client