Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: YKsQt0XgIUxXkFTH3rMearSXWgIGqQOKM5cxyHiF89I=
Subject key identifier: BC:B7:93:14:33:4B:EF:17:B9:0F:4D:AC:6E:41:FF:B9:D2:72:FC:FD
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019CAD5A4D9F637B2CB166D2E138DB589327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0F2C
Signing time: Mon 02 Mar 2026 07:01:42 +0000
Manifest this update: Mon 02 Mar 2026 07:01:42 +0000
Manifest next update: Tue 03 Mar 2026 07:01:42 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: lNY4+kMnNXch4zBGmGUnOwkzoF5CXuPXu6Uq19vLD+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:4d:9f:63:7b:2c:b1:66:d2:e1:38:db:58:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Mar 2 07:01:42 2026 GMT
Not After : Mar 3 07:01:42 2026 GMT
Subject: CN=bcb79314334bef17b90f4dac6e41ffb9d272fcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:18:64:7d:ad:c3:af:76:02:b0:01:26:99:90:
08:f2:6b:05:92:94:80:f0:cf:2a:59:40:20:91:7a:
bb:de:36:92:4c:0d:35:7d:ac:51:44:de:9f:90:8a:
b0:ac:df:91:b1:ee:81:68:e7:23:16:93:26:04:90:
25:d9:18:4d:d1:a9:12:4d:2b:bd:71:64:89:c2:c0:
b8:d6:51:a1:81:13:83:5c:d0:f5:7d:da:21:63:63:
eb:2d:cb:13:ab:ce:7b:57:82:9d:ba:ef:fc:f3:89:
76:15:8d:01:42:40:bf:e6:39:14:b8:39:f4:ea:61:
f1:b0:7a:e9:9d:e3:16:d1:d4:1b:15:3b:8b:1b:34:
93:91:46:dc:33:39:98:01:a5:56:24:19:eb:6f:99:
1e:6b:78:a0:e8:be:c5:53:d3:7a:44:f8:80:81:89:
81:c2:65:bc:b2:54:d3:d9:4b:24:b1:6b:70:82:b0:
e7:6e:48:04:13:03:ba:e7:fc:8f:82:4c:01:18:8c:
d5:bd:2a:54:2f:7e:65:30:56:fc:e1:50:28:74:eb:
37:4e:b1:4d:fa:f4:a2:e2:09:aa:1b:07:55:19:d9:
5b:b9:0e:34:00:4b:e4:da:95:cb:c2:60:bf:79:ac:
27:f0:92:86:42:a3:f4:ed:ae:dd:52:6b:a6:30:b8:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:93:14:33:4B:EF:17:B9:0F:4D:AC:6E:41:FF:B9:D2:72:FC:FD
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7f:82:1d:57:38:31:d3:8a:a1:2c:42:b2:74:ae:27:d2:c5:
03:84:fb:f0:50:64:94:64:9a:19:02:94:80:48:62:49:34:3e:
27:c6:5f:88:a4:31:81:d8:4a:63:3c:22:16:2a:5f:d2:ce:62:
ba:c2:9f:2a:cb:d0:9f:27:5d:e6:1a:97:38:0a:18:2a:47:bc:
c6:4f:99:16:cc:4f:1d:7e:34:68:3f:b8:72:6b:fd:19:bd:64:
fc:71:de:ae:de:21:23:eb:01:9e:7f:80:71:52:f3:c6:4f:3c:
81:99:d2:61:71:fb:82:7d:28:e6:5a:aa:1a:86:3c:3e:20:2f:
b3:d5:40:16:1d:b9:49:14:48:a9:3a:53:f6:21:7c:8b:87:bb:
23:65:67:76:c9:82:b0:49:7d:18:87:6b:d8:f7:74:dc:fb:1e:
50:9a:16:04:9b:5b:1a:fc:a3:03:00:1b:03:76:8a:8e:f5:ba:
e2:df:dd:84:98:41:f5:d3:0d:af:27:af:d1:1d:43:5e:c9:51:
a7:17:e4:f4:04:c8:90:77:20:dc:f0:e6:45:38:db:0b:d7:9b:
fd:c5:ae:12:70:3b:82:02:b2:76:5b:ac:e9:08:63:34:92:3c:
b7:a5:ef:c9:d8:4b:3f:7c:b4:02:39:2a:7a:4e:1c:63:cf:fe:
aa:b0:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:17 2026 by rpki-client