Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: 5DHURK3iaELb3EttFtcC3//nLWFP2jEP4jtRf/5jVMY=
Subject key identifier: 81:A3:7E:45:14:61:CD:18:46:85:D2:75:C4:7E:1B:37:C9:7F:C5:F9
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019CAAFD3C6145DB802B36DABE4F91C5A964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1822
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: RtnHaWja6SnSnKRutDnky9U3/J30Ydcgv1pWxnS/+4A=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3c:61:45:db:80:2b:36:da:be:4f:91:c5:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=81a37e451461cd184685d275c47e1b37c97fc5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:30:47:44:42:08:94:f2:c9:50:6c:bc:3d:
f1:23:fd:7f:32:86:c6:4e:7e:72:62:c2:48:42:5c:
27:9d:81:68:64:ca:fe:17:a2:2d:88:d1:28:7a:94:
43:64:a3:e5:92:4c:73:3b:88:7d:c2:f9:ad:d7:17:
4b:0c:69:dc:32:92:c8:a5:39:c7:bb:c7:51:9e:b3:
e9:ff:af:25:de:46:2b:b7:28:ac:d6:9c:25:45:f1:
eb:94:6c:de:cb:b9:80:04:95:37:da:77:1d:59:41:
8c:7d:15:f8:d3:c4:0e:90:40:25:b9:0e:d3:65:81:
a0:da:f4:ab:fc:da:fe:ae:89:ae:da:4c:27:b8:17:
77:66:da:6a:89:35:fa:c5:d4:98:13:06:b8:9c:32:
8c:5e:53:5b:1a:db:e9:14:a6:f8:ae:61:0b:f4:46:
df:58:ad:f6:4a:b0:2f:df:09:36:36:8a:dd:2f:be:
35:48:b0:2a:a1:a2:24:d7:1d:9c:b6:30:76:4b:a0:
da:41:80:12:7c:13:26:11:be:d8:6c:fc:17:7b:d7:
36:54:2e:31:8a:94:f8:d1:00:b8:e0:54:bc:58:a3:
2a:9c:8e:d4:3c:4c:3f:9b:ec:ce:b6:1c:0a:50:07:
3c:49:0c:ba:71:65:f7:db:54:8c:07:4d:97:83:ca:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:7E:45:14:61:CD:18:46:85:D2:75:C4:7E:1B:37:C9:7F:C5:F9
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:55:de:31:25:52:fc:9c:a8:c8:0c:5a:0b:ff:1d:08:f7:
71:3d:e7:f4:bb:91:44:e5:f2:6d:b2:3e:64:0f:57:3e:8f:0b:
da:90:9d:63:70:d5:97:b8:14:ed:6a:0e:ca:65:9e:92:c8:07:
9d:ed:ca:07:30:b0:1c:5f:a8:c2:ef:30:ce:71:02:6a:ce:32:
96:a8:8c:a7:d0:81:ef:cf:79:b1:ff:1a:f1:c2:7b:ff:02:63:
25:6c:80:e0:c9:7c:cc:c3:29:e9:57:eb:95:5a:be:b4:ed:b7:
45:c3:70:ec:50:e1:fd:79:5b:03:1c:1c:71:10:5e:05:d6:e2:
2a:4e:a6:60:dc:0d:1e:75:a0:33:8b:d1:82:41:a7:a2:63:f0:
d0:6c:48:ce:7b:a8:a5:d6:19:6c:a2:35:cf:17:ef:c3:a8:22:
51:0e:7c:97:32:2b:e0:65:6e:91:ed:2e:b8:56:e1:0e:32:55:
95:b3:f2:5e:ff:c5:1b:f4:6e:ed:41:c4:5c:c9:4c:63:59:41:
6d:45:dc:2e:7d:60:18:f4:5a:01:a2:a3:9d:00:30:7e:f1:d7:
a9:a4:21:75:a5:4f:a8:12:8d:3b:bb:11:72:23:9d:84:46:1b:
69:7b:94:8c:d0:fd:59:46:21:a7:72:ca:7d:1d:ec:aa:64:57:
ca:51:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:24 2026 by rpki-client