Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: 1R5ecTxHhjd+5QboXjQMAoNVCGmE5PdpLxgrc8kUwjk=
Subject key identifier: BD:FB:1F:D3:68:AC:91:3F:C5:A5:63:97:B8:9F:64:30:E2:89:AC:30
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019CABD9D043E5F6F7D2ACD583E2D68B3B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0D6D
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: rCnRxSF4vCjZpEaIpm1U7FTGZwcp9jrtBnFlcrfM0W8=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d0:43:e5:f6:f7:d2:ac:d5:83:e2:d6:8b:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=bdfb1fd368ac913fc5a56397b89f6430e289ac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:7c:5e:ad:68:6a:48:94:2c:2f:7a:49:50:
d1:d9:23:30:25:6b:8a:2a:ac:8e:fa:19:11:b4:80:
41:f8:0f:05:45:f0:f0:80:04:f3:f7:7f:5f:4a:64:
5c:5c:71:04:34:09:7a:21:12:97:c1:35:59:6e:63:
75:b7:27:5a:6a:7c:18:ae:2c:4f:52:3e:ef:02:30:
84:c7:26:c1:10:71:a0:70:1f:47:93:f3:69:40:f0:
9c:ed:d7:36:d7:60:dd:60:20:4c:19:a6:ef:ec:ad:
e4:ce:73:f6:1e:7b:ad:2a:6c:25:fc:e7:7c:3e:9b:
27:5c:5e:8f:17:a3:15:a5:5c:9f:d5:e8:6f:20:62:
fe:2c:59:40:4c:d8:0a:b5:93:13:62:4d:d9:d3:99:
ac:1a:0b:dd:d4:33:37:5a:7d:0d:06:78:9b:a5:14:
eb:e9:74:90:3c:93:e0:04:41:0f:d5:c8:b4:c7:5c:
39:f9:32:6a:f0:b6:a4:04:a2:34:0a:59:78:48:32:
f4:91:89:55:f2:cf:e6:29:02:14:51:ed:7d:e5:77:
eb:00:a3:41:2c:21:47:69:ce:41:fb:a6:b3:94:1c:
04:91:b3:d3:f1:65:b9:b2:45:fc:04:cd:6a:0e:b3:
56:fe:f9:ee:17:5b:21:f0:d3:cb:c1:db:a7:db:ab:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:1F:D3:68:AC:91:3F:C5:A5:63:97:B8:9F:64:30:E2:89:AC:30
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:31:1b:87:7c:06:1a:85:27:e4:e3:05:5a:79:ef:5a:f9:b4:
3e:08:47:f1:c5:7c:8a:d1:21:42:cb:23:4a:96:b7:7a:86:91:
3a:02:ab:21:a8:75:0b:58:53:12:06:a7:1f:d5:ae:50:9e:2e:
04:31:b7:e0:e2:85:6e:72:1e:1c:fc:a7:14:b4:cd:8b:85:8f:
90:a3:1a:d8:fd:5b:5d:36:3a:9e:48:ad:4a:84:fe:13:31:95:
9c:35:53:dc:27:10:c6:15:9a:15:ab:96:c2:d4:5e:5b:ee:b9:
62:fa:8e:73:89:be:66:52:f4:40:c5:01:f8:03:2f:72:00:e4:
2e:94:8c:9b:a9:5c:04:44:8d:17:ac:f5:0b:fd:4b:5b:9b:88:
23:99:52:ae:fd:a1:ca:71:d4:1f:56:8c:86:8e:f2:d3:9f:b4:
ec:ad:b5:01:4b:81:34:88:61:7a:ce:9f:69:ac:39:7d:8c:39:
1b:3f:d3:cf:c7:b8:a6:49:07:ca:99:dd:d5:3e:3f:56:2a:2c:
e0:3f:03:0e:46:d9:23:8c:68:f7:07:84:04:3d:6e:68:ba:de:
f8:4c:07:61:78:11:67:65:f3:81:75:99:41:24:62:da:6e:ff:
e9:ed:c7:fc:0d:53:ba:13:e7:94:db:81:68:7d:ed:6f:7e:69:
1a:e5:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:21 2026 by rpki-client