Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: mVze3GdamOQ3c2VCwogYaQ8sBKEAJhD614AaO8AU8Fk=
Subject key identifier: 65:66:39:BF:B4:56:2C:C5:A9:BC:26:48:45:E8:D0:22:7C:8C:2C:FD
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019CAD22B02D5575E0C597C3C5CBC2C7F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: i6I6lHoKIDBq9pSO8FpfUbbV2sNmIMF2C2mxIyg4wuc=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b0:2d:55:75:e0:c5:97:c3:c5:cb:c2:c7:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=656639bfb4562cc5a9bc264845e8d0227c8c2cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3f:32:eb:ec:21:5b:c7:07:3c:e3:9b:73:27:
c8:f8:0a:fa:5b:61:61:63:87:73:92:03:07:a0:7b:
5c:c1:bb:1d:8c:9f:a1:ab:46:5d:d3:b2:be:af:5e:
9b:02:54:8a:46:56:4c:ea:d7:cc:a1:6c:57:10:3f:
b1:8c:51:0a:f7:25:e3:16:f0:de:8e:cb:b7:d6:9b:
5a:5a:ca:66:e1:f1:14:06:5a:d3:7d:38:0e:e8:b0:
c0:80:e5:f9:d3:93:05:d0:5a:ca:6f:49:8c:b1:7a:
c7:a3:4e:94:7e:a6:df:b1:bd:a2:22:bf:51:d8:36:
49:ab:fb:c8:64:a0:d7:78:d1:6c:b3:db:c6:e2:d5:
7b:9f:86:df:bc:97:9f:52:b4:1a:16:88:ba:4e:97:
2d:76:21:7c:84:78:c4:92:44:6f:3d:2d:45:be:b4:
18:db:4c:a7:01:e3:1a:83:8c:f1:a0:60:6a:e6:a5:
93:8d:27:8f:71:3f:28:1a:be:3c:c7:90:ec:47:2a:
bd:36:37:5c:c5:d1:57:b4:95:2f:3a:89:af:13:ee:
ad:66:3f:a9:d0:e3:3e:de:9c:e7:48:5c:5c:2b:62:
4e:99:da:09:46:c4:fe:19:d5:38:8b:db:79:e4:69:
bb:e1:7d:d5:10:f5:55:32:8d:6c:e1:9b:7c:f2:31:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:39:BF:B4:56:2C:C5:A9:BC:26:48:45:E8:D0:22:7C:8C:2C:FD
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:5f:a1:a4:40:a9:a6:ec:16:73:93:dd:61:a5:a3:48:4b:
1c:9a:0b:db:80:5d:0e:96:ad:97:21:3b:73:0e:ae:0f:ee:a6:
ac:53:60:f4:06:70:a5:b3:d3:2e:f7:ef:34:01:a5:09:fe:d6:
ea:f0:56:29:2d:19:fa:7a:da:27:0a:f8:fa:32:60:58:67:ff:
f5:6c:cd:5c:2c:30:d1:10:e6:e1:4c:60:34:40:83:c5:fc:98:
12:ea:72:fa:89:3a:8d:d3:7a:db:87:89:a9:49:5b:82:14:2a:
e1:cb:cf:a2:92:a1:d0:a8:b3:42:82:d7:e2:78:5b:3e:eb:bf:
c0:17:6e:16:52:51:e1:90:1a:eb:3a:40:23:4a:26:19:c6:a5:
dd:bb:44:c0:7d:e7:3e:04:13:c5:2a:49:1e:38:33:05:a0:b8:
42:84:24:45:f1:09:ca:75:bd:49:b8:25:17:3b:33:2f:77:c2:
b7:c5:aa:9d:a3:94:66:55:a1:5d:d0:35:e7:72:be:b4:15:de:
47:58:3d:1b:2e:c2:6f:5c:33:10:c6:29:42:e9:07:4f:70:78:
3c:10:77:b5:5b:28:fa:e5:51:9d:0c:f8:8f:c5:9c:c8:0d:6d:
b8:99:66:af:0d:92:31:15:83:32:ce:d7:81:b6:ec:6e:be:01:
b7:cc:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:35 2026 by rpki-client