Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: qE1qt8ZbpUw0X9+PEJx3DLs0RJMEIN8KcrcdPxiYLJE=
Subject key identifier: F5:67:93:0E:E0:33:0B:28:E5:BF:E1:E4:87:0A:5C:7D:0F:74:58:9F
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019CAB33EBBB9AD5AF40FB72BDD632EE81D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 089D
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: 0i8M7CfSXXtvkhitBcF5pyiUIqhb/7fZVjQRSI65xWY=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:eb:bb:9a:d5:af:40:fb:72:bd:d6:32:ee:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=f567930ee0330b28e5bfe1e4870a5c7d0f74589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:4c:77:79:85:83:7e:70:9b:e0:58:26:52:
8a:76:2a:8b:67:8f:ee:76:b5:d5:94:a4:41:27:cf:
6a:23:04:4a:10:15:5d:fc:6b:9e:04:01:4a:55:4a:
4a:20:5b:75:6c:a2:96:8e:af:62:5b:1c:0c:8b:c6:
f4:2c:a1:d1:2a:43:4d:1b:72:67:48:fc:fd:be:44:
8a:f7:d9:b9:a5:04:ad:40:c2:b3:45:7f:d8:63:e1:
2a:56:75:c3:10:f2:34:a8:c9:28:c6:05:14:b1:ae:
c9:be:6e:63:89:eb:ad:4c:dc:23:f9:9f:32:09:6b:
25:11:09:33:dd:66:2f:64:b0:01:61:04:72:03:0b:
7b:32:c1:93:5d:86:38:c2:4d:5b:91:51:70:69:6c:
20:cb:25:5b:8d:2d:f4:74:b4:b7:33:67:4b:16:f3:
1a:26:a9:3e:a6:65:d5:0e:d0:73:a6:2a:ac:ec:66:
33:8a:0e:23:be:b0:7d:03:15:98:89:65:08:da:fa:
6f:81:1c:b6:e0:91:fa:9e:a0:31:e0:a5:a0:20:3f:
49:5e:5a:ec:e4:48:ac:7f:4b:a2:f6:28:28:88:90:
ff:ee:dc:00:a1:49:4f:c2:c8:0a:67:39:11:50:c0:
5a:3d:a7:99:c3:37:3b:f7:e0:24:73:8c:79:f4:51:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:93:0E:E0:33:0B:28:E5:BF:E1:E4:87:0A:5C:7D:0F:74:58:9F
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3c:1a:0f:bb:30:f1:24:ca:a6:2b:38:3c:15:b7:7d:30:fc:
e9:8d:3e:ff:7a:d3:66:52:a3:ee:00:3d:6e:ee:ef:1e:14:f8:
90:cf:69:27:5e:42:c6:68:0e:ec:63:6f:c8:a9:69:80:52:e0:
e9:28:2a:f9:94:cc:21:36:16:ea:0e:2d:d1:d0:51:f4:b8:d4:
8b:e4:5d:16:b4:f1:99:ef:b6:e8:4f:15:05:a0:fe:fa:f2:8a:
0b:cf:40:3d:a7:b5:0a:a2:dc:45:b8:35:d5:9b:a9:90:2a:09:
ea:59:6b:8f:35:2c:dc:d2:f1:cb:10:2a:2a:e1:4c:56:7d:44:
9e:8e:f0:69:89:e4:e1:58:8a:31:62:23:37:4b:92:ab:09:a0:
03:fc:0f:ed:75:52:fe:58:f0:19:e4:a4:f6:4f:2f:bc:f7:56:
e3:3c:a6:7f:55:ee:63:fc:01:28:e0:5a:a0:e2:7e:ce:87:74:
67:f4:8f:59:81:b0:71:b5:8a:96:dd:d6:86:b4:b1:70:4c:36:
a7:e0:32:86:0f:87:89:a7:8e:bb:d5:af:c1:9b:7d:3e:e6:ce:
e8:0c:65:cc:73:b4:ee:8e:c4:15:3b:f3:bf:45:5d:ae:ae:0c:
66:7d:26:4e:ac:e9:87:16:65:1d:ec:c6:5f:60:b4:d5:63:18:
6e:02:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:20 2026 by rpki-client