Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: 0epzUu84lQjwpqTeJdPOpkZzXmF01i3SSzoih1SSxR8=
Subject key identifier: DF:49:BD:86:D6:12:9F:40:28:4A:43:B6:24:9B:1F:5E:A4:AD:48:55
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019CAC0F9283F10A9196B38E4F796B04911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0B65
Signing time: Mon 02 Mar 2026 01:00:27 +0000
Manifest this update: Mon 02 Mar 2026 01:00:27 +0000
Manifest next update: Tue 03 Mar 2026 01:00:27 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: QmkNNn1RHOCwV+YmTrUc3acg5lfOEzGjpR+s15QEHYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:92:83:f1:0a:91:96:b3:8e:4f:79:6b:04:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Mar 2 01:00:27 2026 GMT
Not After : Mar 3 01:00:27 2026 GMT
Subject: CN=df49bd86d6129f40284a43b6249b1f5ea4ad4855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:b1:a9:69:54:d5:72:ba:4f:15:68:d4:5c:
9d:e9:e4:17:91:da:77:32:03:ea:d0:2c:cc:63:f0:
04:b2:8f:40:67:e7:51:05:50:22:6a:2c:1f:56:a9:
8f:cc:1d:12:3c:6e:0a:3f:b3:44:67:98:e7:d2:11:
67:54:87:1a:f4:e2:56:e1:a3:e0:a2:d7:a5:04:5b:
d5:50:bb:eb:79:e9:f6:39:79:33:36:82:5c:da:50:
a5:53:ea:ec:89:81:ff:ed:af:eb:83:0b:08:55:1d:
a1:3e:d4:8e:7d:0e:31:76:4b:b7:09:db:53:16:a5:
9a:6e:82:ff:a4:6d:d0:5a:7d:27:13:e5:b9:35:37:
16:1b:7d:c3:a9:6d:3b:25:8c:cc:61:b6:9b:db:01:
ae:00:07:23:91:e7:fd:13:28:97:d0:72:78:7c:12:
83:1a:82:f8:b8:d5:63:9e:9b:eb:9f:75:3c:5c:10:
89:91:8a:65:68:68:b8:37:55:19:fe:f6:42:fe:64:
e9:19:f0:e4:f3:5f:e4:2d:ff:44:24:15:e4:5f:c8:
01:24:71:86:f9:ab:fd:6d:9e:9d:7a:58:e8:f4:d5:
03:c5:bc:f2:89:aa:70:aa:f2:51:8d:58:88:4e:ce:
0e:06:c5:f1:e5:07:9d:82:eb:d7:51:27:82:c8:86:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:BD:86:D6:12:9F:40:28:4A:43:B6:24:9B:1F:5E:A4:AD:48:55
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e3:95:6a:8e:7a:d4:24:51:1b:91:6d:75:8c:80:a5:c1:ff:
89:db:ab:c1:b4:e5:4c:9d:2f:04:68:2b:e0:1e:ad:97:c6:d6:
9b:c1:04:7e:56:fe:4e:e5:6b:1b:99:e9:f7:a8:9f:f8:2c:ec:
4d:b8:ac:a3:99:6c:10:47:a1:5a:42:96:de:44:f7:d3:66:d2:
24:11:7a:89:59:28:bb:a9:a3:af:8d:62:10:c9:03:a1:91:39:
53:7b:b6:d0:42:93:24:45:79:0f:79:2d:7e:42:72:bb:23:9f:
da:80:c3:30:a1:78:b7:1e:95:c6:37:e0:70:3f:22:85:82:7c:
9a:9f:81:88:2d:66:1c:41:a5:78:91:83:48:53:56:bc:c9:8f:
7c:bc:83:38:f9:ea:e5:3e:5f:c4:db:34:17:e0:08:1b:5d:00:
73:b9:df:7b:47:2b:8e:f0:81:6d:22:6a:54:45:e5:c5:e1:6c:
6b:8b:c0:cd:48:96:ea:4d:de:52:5c:eb:92:c7:d8:55:eb:98:
cf:c8:5f:d5:07:46:5f:f7:15:29:c5:7c:0f:e1:03:d4:bd:7f:
6f:ff:e3:e5:33:3a:50:c5:bc:0f:87:3f:31:6d:e4:93:f1:2b:
03:db:03:48:e2:fb:40:98:83:25:c3:0f:de:fb:65:33:e6:80:
b3:b2:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:39 2026 by rpki-client