Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: JQzXZNS7pdatGqUu3e/ieDvTbsPu3XsqaIaYp0oqito=
Subject key identifier: 1B:2F:16:5A:5D:C4:31:0D:12:51:46:C2:85:60:75:03:F3:1C:F1:0F
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019CAF1149DE59BB8547D667874D8D02B433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 027D
Signing time: Mon 02 Mar 2026 15:01:11 +0000
Manifest this update: Mon 02 Mar 2026 15:01:11 +0000
Manifest next update: Tue 03 Mar 2026 15:01:11 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: mKgz/PVLifLTpSO8/2tLgV4Wi7Y8bPl6Q48FUjeFHHk=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:49:de:59:bb:85:47:d6:67:87:4d:8d:02:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Mar 2 15:01:11 2026 GMT
Not After : Mar 3 15:01:11 2026 GMT
Subject: CN=1b2f165a5dc4310d125146c285607503f31cf10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:9c:e4:d4:68:39:17:66:ed:a8:5c:33:aa:
a3:0f:6a:92:d0:0f:5f:2f:1b:51:4c:bb:c2:45:6d:
ff:03:67:ee:a1:b1:8f:c2:75:03:38:71:07:5f:d0:
6a:d9:25:21:d5:3e:d5:2f:e2:cf:da:cb:46:27:49:
55:78:0f:9f:92:fd:0f:8b:11:1b:44:4a:70:a6:23:
92:44:bc:12:d5:a3:ea:57:36:82:e7:71:08:bc:69:
0f:8a:4d:a8:4e:ab:4c:76:b9:ab:bf:82:3b:88:bf:
4b:0e:58:f5:cb:6f:91:ed:2e:43:a6:5a:f0:ed:18:
50:ce:51:f8:a0:86:bb:b2:dd:69:f8:66:89:1e:5e:
82:f0:a2:91:95:af:77:d8:70:65:c4:15:d9:a8:f7:
1c:80:f1:7d:d9:35:7f:cb:0a:5f:30:d8:48:55:68:
98:a5:81:5c:70:26:10:42:5b:91:8e:e5:f5:71:47:
55:74:48:40:04:b3:59:12:e1:07:b4:e7:2c:7e:9d:
01:f9:54:d6:89:29:ee:97:94:41:86:2f:ee:42:fb:
d8:f2:32:93:b6:bc:17:91:14:6e:b9:0b:1f:fd:38:
3a:73:a4:f6:3a:52:48:65:a3:19:a3:4b:8c:01:43:
cd:ce:ea:6a:52:60:b4:85:25:9d:49:a7:07:63:3b:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:16:5A:5D:C4:31:0D:12:51:46:C2:85:60:75:03:F3:1C:F1:0F
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:24:19:ab:7c:13:20:32:9a:cc:49:b7:3c:da:27:da:a4:
3a:71:4e:6d:56:74:91:3b:be:c2:34:a1:5f:4b:89:a8:26:f4:
79:6e:ba:e0:04:26:4a:3a:6d:33:19:31:6c:08:a7:a6:e7:7c:
b6:f2:26:fb:5a:45:7f:46:1c:5d:c5:35:54:95:f6:dc:7a:75:
af:b8:22:b5:f8:ae:74:22:bd:01:83:2c:0c:0a:2d:a7:dd:71:
d1:d7:a3:24:ab:d2:5c:22:48:be:52:4b:b7:fd:3a:df:45:43:
51:94:9f:b5:3f:f8:1f:df:72:2a:10:3f:6e:8e:5c:06:70:1b:
eb:41:4b:ab:a5:e7:6d:92:76:f2:5c:57:5f:2f:63:eb:fe:aa:
fb:d1:a2:80:11:5d:c4:06:bd:2c:23:1a:fb:7a:64:97:7b:80:
f9:95:ad:a8:92:08:3b:87:11:83:aa:1b:24:23:e9:bb:25:93:
56:14:1d:0c:32:4e:96:92:5c:f6:55:5e:1a:bb:6d:b6:1f:4b:
a0:09:77:87:2a:c1:bb:d0:ff:dc:40:6a:da:8d:f1:6c:5b:ad:
d0:bd:ea:c7:ad:79:27:6c:d0:57:29:70:43:60:4a:13:17:b9:
8b:b7:e0:c9:75:a2:47:7b:8a:d1:14:d8:8c:1e:fc:5a:ed:0b:
ac:45:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:32 2026 by rpki-client