Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier: A6Yar73CPm04omHg5A3ATkgT2Vye8V5Mkm7sYgDLoqc=
Subject key identifier: 01:72:70:5E:34:E5:A7:11:6E:84:97:8B:9F:24:80:E4:0E:06:5D:AC
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 019CAAFD74A0168AE314EDB0C1DC50A4CF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number: 0F7A
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: pDNQOGC3fJN4VYPKedFjIMxsxnHsdt+XzPvzspb0Kvc=)
2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:74:a0:16:8a:e3:14:ed:b0:c1:dc:50:a4:cf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=0172705e34e5a7116e84978b9f2480e40e065dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:68:f4:fa:d5:11:ae:d8:9a:a2:e0:54:0a:
5a:e0:87:34:50:87:31:fe:c8:0a:2c:51:7a:e1:0c:
1b:f2:fc:73:da:6a:ad:97:3a:3d:e7:2c:27:d2:73:
89:88:e0:85:05:43:e4:eb:69:27:73:89:e8:b3:4f:
7f:05:2c:c2:88:51:f2:7d:60:33:d3:5d:85:87:30:
f2:ca:e5:58:ec:7d:76:1b:2e:e6:76:7d:b8:de:9f:
1d:ed:d2:12:c7:91:71:4e:6b:7e:60:2f:08:97:ab:
1d:cb:1e:03:0d:88:56:61:2a:0e:56:2f:aa:bb:40:
a8:8a:b0:25:ef:d7:ac:29:10:d2:d6:fd:51:3e:af:
63:01:8d:4c:73:fb:28:66:57:4e:65:55:a3:fa:f0:
9a:76:de:64:7e:bf:ed:1e:4d:c6:3b:9c:43:e6:d7:
4a:32:14:a6:6e:75:2f:5b:9b:a0:4a:bb:3c:a4:48:
e9:85:86:b0:b4:6d:65:13:5a:fd:53:80:ba:30:af:
b7:42:c9:5d:97:19:fc:39:ec:75:21:19:f5:33:07:
c1:34:6e:74:da:ca:71:67:63:59:b5:e6:52:50:6a:
be:a3:b4:93:10:cc:b0:ff:b8:bf:c5:19:ff:16:8a:
66:70:f8:f3:d0:f1:0c:8d:13:8d:8a:57:88:01:c3:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:70:5E:34:E5:A7:11:6E:84:97:8B:9F:24:80:E4:0E:06:5D:AC
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:70:1a:85:c8:18:1f:e0:26:1a:c4:b6:6c:02:19:3f:2e:
d7:ca:eb:fe:2d:e1:56:45:45:10:6f:8e:9a:43:99:93:ac:93:
47:48:bf:82:18:80:e2:ef:01:9b:7d:88:c2:5c:65:c2:83:ee:
a7:d5:db:6a:40:8e:9e:a2:a4:54:8a:84:e3:3f:3e:ce:7e:ce:
12:ba:75:08:e4:61:d5:2b:a4:26:5a:98:b4:bf:82:ce:ac:53:
87:fe:ff:64:62:7e:85:ac:23:37:c2:6a:cb:2c:4e:7d:45:11:
0b:93:bc:27:16:6d:10:52:27:d5:c2:e0:09:ed:db:fd:b1:bf:
2c:1a:73:39:fa:a3:18:eb:4a:32:f8:ab:bc:86:72:52:0b:7e:
e1:80:68:4b:4f:9d:30:48:bd:41:72:2a:0f:78:86:3d:c4:2d:
ee:a0:e8:a0:34:ff:08:a2:64:8d:49:58:8c:2e:3f:7f:45:21:
a2:ec:fc:55:e4:3e:fb:e4:e7:47:79:41:e5:78:08:79:f9:7b:
b3:f1:a3:5b:ed:ff:7c:2d:f3:68:9c:99:c1:37:1b:b3:7d:2f:
2a:d2:d5:4b:ab:80:b3:95:56:47:99:f2:df:88:86:a9:0b:de:
b6:ef:29:44:db:9e:0a:71:00:b5:06:8b:b8:55:76:6c:ff:53:
f3:bf:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:07 2026 by rpki-client