Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: 08+Y/oI5UMYGLc3mH55LlfgiBWUknJqHVFV38nGCMLg=
Subject key identifier: 04:56:95:4C:A8:DB:00:57:88:32:52:AD:9A:16:AC:F8:CB:55:93:76
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019CAEA35DE745D4C689F48CDFB2C704BA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 119B
Signing time: Mon 02 Mar 2026 13:01:07 +0000
Manifest this update: Mon 02 Mar 2026 13:01:07 +0000
Manifest next update: Tue 03 Mar 2026 13:01:07 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: lcLd8RQgY6RehmBPmHF0W5B0sGdntgTQJJKi91t1H0Q=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:5d:e7:45:d4:c6:89:f4:8c:df:b2:c7:04:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Mar 2 13:01:07 2026 GMT
Not After : Mar 3 13:01:07 2026 GMT
Subject: CN=0456954ca8db0057883252ad9a16acf8cb559376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:cf:06:9e:d5:ae:ae:cc:89:c1:56:19:74:
03:3f:cd:87:1e:6d:0e:a0:1a:5b:d4:9f:ec:d4:86:
4c:0b:d9:49:17:5f:da:0f:3d:d0:94:56:ff:e0:7b:
c8:a4:76:ea:05:54:91:eb:ee:bc:4d:04:24:8a:49:
4f:b8:a0:06:c0:93:d3:a6:ec:61:e9:a5:c6:57:1a:
6d:ee:88:cb:56:df:1f:8c:37:da:94:79:14:7a:16:
d2:22:2d:ff:a7:1d:46:44:85:3a:af:62:34:32:ce:
77:be:ed:a9:9d:92:e6:94:23:96:3b:1a:36:da:12:
4a:6c:8b:87:67:cb:bf:42:55:bd:d3:62:fd:b6:ec:
33:2d:84:fe:27:d2:b9:7c:81:0d:e9:02:a6:86:1d:
0b:33:23:22:d9:64:db:0e:fd:8c:09:19:48:ca:29:
45:0b:dd:1d:15:d6:54:e0:d2:6f:09:c0:ff:41:c2:
91:4d:9b:a1:93:f8:5a:bf:da:e0:cc:0f:f7:4a:5c:
9c:a9:70:f8:b0:bc:d8:79:31:0e:07:44:44:94:6b:
0f:60:55:90:fb:47:50:42:b9:56:11:38:2f:26:e6:
b4:8e:d6:00:13:a0:5f:d2:5e:92:0c:39:2f:5b:4f:
62:d2:09:b4:36:c4:55:c1:7f:af:0d:b8:dd:12:86:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:95:4C:A8:DB:00:57:88:32:52:AD:9A:16:AC:F8:CB:55:93:76
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f3:d9:38:5f:1f:2f:4a:78:a4:9b:f5:dd:e5:9b:49:59:69:
06:e4:42:0f:f5:b1:9f:97:d5:ff:99:98:b1:57:05:a4:9f:be:
be:9f:0d:25:3d:c1:27:a8:03:8d:f9:91:53:6e:3f:05:3b:cf:
c1:bf:4f:bc:04:74:ef:ee:3f:18:39:1e:bd:8c:c7:e8:31:4b:
64:50:1b:78:b1:bc:3a:67:77:7c:57:a3:24:88:e2:f3:37:d5:
a2:ff:ff:1c:98:83:fe:a4:f7:f6:1c:33:fe:ae:f0:b8:03:84:
b8:33:28:0c:94:ba:c0:88:fd:b3:99:dc:80:f5:e4:6e:1f:2c:
31:b9:74:f5:80:d3:7a:85:05:16:24:53:b2:75:02:4c:0f:8b:
f6:21:ce:65:da:61:1e:54:31:40:a7:6f:01:2d:35:5c:1e:1b:
19:93:23:d6:47:36:93:30:d7:e2:42:07:74:9b:e9:f4:fc:6a:
53:f9:41:fe:91:82:a6:ae:b0:52:90:bf:41:a3:3c:4f:76:24:
fe:02:87:ba:b4:6a:40:ed:e4:c4:12:20:1c:5c:fb:b7:e7:0f:
d1:47:22:cb:ac:aa:9a:98:d9:4c:74:01:4b:7d:db:30:71:80:
c2:d0:89:13:32:37:3c:18:0c:71:cc:80:ea:e2:55:5b:8b:2f:
bd:c1:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:38 2026 by rpki-client