Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: 45wOpBkyEod3NC8chOg28o8STs1iIr8n8C+E9nXLxmU=
Subject key identifier: AA:8C:3B:70:68:4C:6F:21:6C:CC:B1:57:02:AF:6E:2E:FE:D3:0F:D4
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019D9C2CA1E4ED8A8BB0A18526F20EE2D034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 0389
Signing time: Fri 17 Apr 2026 16:01:03 +0000
Manifest this update: Fri 17 Apr 2026 16:01:03 +0000
Manifest next update: Sat 18 Apr 2026 16:01:03 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: a2H0+pzsaeFr3QCORV/X2oWxv3sNeTVq1r9f9clq8lg=)
2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a1:e4:ed:8a:8b:b0:a1:85:26:f2:0e:e2:d0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Apr 17 16:01:03 2026 GMT
Not After : Apr 18 16:01:03 2026 GMT
Subject: CN=aa8c3b70684c6f216cccb15702af6e2efed30fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:c4:67:e8:97:e8:66:b2:25:ae:b8:4b:d5:
be:a0:c4:88:21:e1:16:a8:a2:60:45:95:e1:a6:ab:
f5:db:dc:6c:56:b8:19:59:dc:87:92:60:9a:2e:55:
2d:33:84:e5:da:3b:40:fc:b6:54:02:b8:d2:e3:15:
44:9e:31:8c:93:a2:da:b7:5f:da:64:fe:b3:3a:73:
3c:a1:62:66:73:ea:fb:fb:ce:fe:9b:8c:ce:62:86:
55:97:fb:f0:c8:a1:f8:36:73:80:94:5f:e8:58:c4:
83:f7:de:62:dd:37:ec:94:54:f9:44:b6:cf:c6:f5:
23:13:0b:c3:0e:ef:78:1a:47:cf:7f:32:87:e9:02:
c4:26:45:4a:58:f4:aa:2f:4a:90:aa:6e:05:9d:ce:
10:66:6b:5e:b8:26:c7:45:b5:2a:dc:91:0b:5e:f7:
6b:5e:02:77:64:9e:ce:73:5f:3f:11:50:dd:0c:a9:
f0:cd:81:4c:82:67:f4:df:e2:83:47:b9:74:df:a1:
4b:5a:4d:4e:c2:94:96:06:ce:e7:92:43:ab:68:13:
b8:7c:0d:bb:80:79:4d:11:3c:fd:70:6f:fc:c8:c4:
95:b7:67:fe:9c:7a:d9:0c:af:21:bd:43:37:99:46:
f4:de:2d:4e:67:ad:6c:ed:be:45:ae:e9:80:af:a4:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:3B:70:68:4C:6F:21:6C:CC:B1:57:02:AF:6E:2E:FE:D3:0F:D4
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:1d:8c:79:a8:3e:91:72:9f:2c:20:99:7f:b1:d9:04:da:
f7:87:8d:d5:84:b0:f6:47:50:ba:93:e8:7e:72:45:00:a7:9f:
e1:00:df:19:9a:49:c6:74:a4:52:02:3d:5f:13:1b:cb:ab:e7:
98:52:a4:96:2a:63:b4:24:13:34:4b:e9:e4:21:0b:06:3e:ea:
8f:7e:6c:00:c4:f9:c2:48:93:9e:68:20:06:69:f1:13:71:2f:
bf:cf:3d:60:04:89:e0:ee:ff:ba:76:47:13:cf:ea:0a:56:91:
b9:ad:a6:89:5f:15:4a:fa:e4:88:54:44:ed:11:92:1b:24:a0:
05:6b:b6:5a:79:13:e2:42:b9:5c:a1:ec:49:b0:e2:b2:40:b6:
b0:4c:33:4d:24:93:e1:68:65:6d:c1:dc:53:b6:4f:49:47:32:
3a:89:65:b4:f8:64:30:23:99:38:06:43:2c:e2:20:ab:85:75:
ab:dd:06:e9:39:86:c8:75:d8:f9:42:1a:f4:ad:61:e6:b6:8e:
ab:5d:ba:15:f2:c5:ae:b0:96:81:e3:25:8f:da:90:42:88:9c:
8e:2d:d1:63:b1:e0:a0:41:1c:0a:e2:aa:0f:84:30:e0:d3:b4:
59:6b:c1:b1:3c:61:eb:12:fa:24:d7:97:95:6d:0d:ac:0c:d7:
93:b3:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:27 2026 by rpki-client