Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: YhXHpxxni72fF4qMTRB5jmbuhUZJHIXkCv9MULlPVHE=
Subject key identifier: F1:BF:B5:62:BB:28:A6:DE:BE:DE:0B:EB:E0:2D:B3:52:55:4F:A6:87
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019CAEA2DB68EE4647E299654C56F4980ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 13:00:34 +0000
Manifest this update: Mon 02 Mar 2026 13:00:34 +0000
Manifest next update: Tue 03 Mar 2026 13:00:34 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: KUG8wS98q8RLq2McYbXy7rvCu5uAzTuB9E9zMVhbTwc=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:db:68:ee:46:47:e2:99:65:4c:56:f4:98:0a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Mar 2 13:00:34 2026 GMT
Not After : Mar 3 13:00:34 2026 GMT
Subject: CN=f1bfb562bb28a6debede0bebe02db352554fa687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:9b:68:aa:68:46:58:23:51:0a:8e:51:2f:
02:96:c9:1c:8e:9b:eb:d9:9d:ca:df:9e:52:82:f5:
a7:8b:52:2e:18:cd:1f:92:90:6e:da:53:fe:33:68:
ab:9d:44:be:8c:f9:60:c6:50:d1:78:66:8f:4b:10:
ed:27:0b:17:aa:41:75:9f:33:d2:ac:ff:3c:e1:02:
37:77:5e:55:e5:e3:58:83:ff:55:c6:f9:0d:21:0c:
bf:90:ef:c8:88:63:c5:6c:c2:80:e0:91:f8:c7:40:
cf:f4:ac:9d:36:b3:55:9a:b5:3b:62:cd:2b:99:49:
9d:d8:e8:a7:91:a9:42:c3:45:34:2e:4c:24:d5:89:
0e:d3:6a:17:cb:d1:10:1c:94:c4:54:82:53:6d:71:
18:4f:2c:50:1c:8f:a7:b6:cf:ad:1f:e8:d6:2e:5d:
a9:0c:c8:78:bf:a9:b4:29:a2:d0:68:52:d3:da:b1:
07:f1:83:57:db:df:3d:39:8c:fa:e7:60:29:9d:35:
c2:37:67:98:8d:cd:33:50:88:e2:f7:57:43:33:a1:
8e:7e:ca:af:63:35:6b:35:79:0a:85:a4:fb:ba:6d:
04:e3:4f:0a:4d:42:68:61:24:a8:42:fe:a6:50:89:
d8:7e:64:cb:ab:92:e9:3f:06:53:a8:7a:31:f6:37:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:B5:62:BB:28:A6:DE:BE:DE:0B:EB:E0:2D:B3:52:55:4F:A6:87
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f0:f5:7f:a7:f3:ad:88:1f:33:82:78:ee:55:ed:11:1b:9b:
11:cd:cd:8d:e4:99:53:80:58:8d:e5:01:4c:52:98:5c:36:ac:
65:0c:ac:9c:62:1e:a8:75:3f:71:0d:35:f7:ec:d2:36:e8:c9:
99:a8:19:f7:49:e1:67:88:d5:d2:21:11:ce:7e:fe:58:b7:d8:
06:88:d8:a4:d9:4a:da:ee:2d:99:f3:a0:13:26:6a:20:3f:c0:
94:3e:db:5b:4c:6f:ac:a3:c8:2f:b6:af:ef:23:60:c7:ae:46:
20:d1:b6:b4:df:dd:af:5f:db:7b:70:52:8a:89:6d:29:8a:fb:
3c:3e:2e:4f:33:b9:f5:9f:6e:df:dd:1a:91:0a:1f:24:d5:6d:
a1:70:6e:10:c5:ba:5e:34:88:0e:11:03:ee:fb:2e:2c:a7:ed:
48:f9:cc:6b:4b:8c:91:a7:2d:fa:b6:97:71:93:f0:7a:6b:21:
6f:53:a6:66:3b:de:10:f0:64:84:f6:89:26:80:78:07:f6:07:
23:a4:f8:9d:db:26:49:c4:3a:25:6c:14:3b:d8:04:07:56:0c:
49:42:4f:a2:60:c1:65:3a:b3:42:20:57:23:92:d3:77:70:a5:
1a:c9:22:94:01:06:3b:1e:1c:4f:c1:2c:aa:ce:f2:fa:53:97:
c8:2f:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:10 2026 by rpki-client