Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json)
Hash identifier: nmOajg1FIHd6Gkv/2Fx/5RvSHoJ2oOVj9k7F/xA7TrE=
Subject key identifier: 58:02:F0:57:A8:D9:4B:C2:87:06:CD:57:10:2C:07:35:DA:FC:92:B6
Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Certificate serial: 019CAAFD98295E925E7FCD5AAF8C4F013A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
Manifest number: 0797
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: KOyr41duPwX1BGTRZCAa6QAbdxRYBiRXGIn0SJtU0Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:98:29:5e:92:5e:7f:cd:5a:af:8c:4f:01:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=5802f057a8d94bc28706cd57102c0735dafc92b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:a9:bc:01:d2:81:71:a8:e4:41:64:81:6c:
d0:dc:58:72:1f:8f:70:bb:b9:a8:57:2f:dd:2e:b7:
2d:92:dc:e9:5e:b6:db:af:64:00:93:c0:0f:65:6e:
65:5c:59:0f:68:f0:aa:63:78:04:74:74:af:04:3b:
eb:8f:d6:0d:7c:69:a2:cb:2c:83:06:3a:98:f4:bc:
30:25:55:21:5b:53:a8:1d:90:8f:be:f3:ea:d4:83:
9e:32:4f:06:c9:b4:cd:f7:0b:a2:83:32:87:6d:2f:
49:bb:6f:2a:e8:8d:19:2a:30:9d:fe:a3:9d:85:c5:
19:86:66:c4:9d:20:b8:ff:42:6a:24:42:72:ff:e1:
0a:5a:75:9d:b2:8a:2a:33:69:4a:a1:a2:73:62:c0:
69:7e:d0:de:05:eb:10:23:4c:7d:a2:d5:2e:ca:75:
02:d5:cd:c5:f7:b2:d0:b9:e5:00:0d:6c:3c:78:8d:
2d:d7:96:96:61:04:00:74:58:66:bb:16:2f:26:23:
71:b4:a0:d5:03:1e:4b:dc:a7:06:07:91:54:5f:57:
6a:63:e6:3f:17:96:b8:65:fe:14:a7:73:dd:eb:06:
62:ef:db:b8:cd:81:20:f6:43:95:4a:a9:48:f2:c3:
9a:a0:a5:19:db:b1:86:cf:12:2e:ae:15:4d:90:c5:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:F0:57:A8:D9:4B:C2:87:06:CD:57:10:2C:07:35:DA:FC:92:B6
X509v3 Authority Key Identifier:
keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e5:b7:00:cd:45:09:4c:e5:a4:73:99:db:20:0c:48:7f:c1:
55:d8:09:e8:da:a7:74:b9:30:c8:12:1d:b3:82:70:62:ce:4f:
2d:38:bb:4f:fe:5c:30:d4:ad:a3:1a:ec:ec:fd:81:e1:3c:70:
9f:b1:1e:58:f6:73:eb:c3:8c:3f:ec:84:c7:81:9e:89:44:e2:
ec:26:8a:f6:5e:1f:b3:ec:e3:35:88:08:01:9a:eb:57:97:ef:
16:eb:2b:06:a1:4a:16:53:94:64:b3:18:06:fb:23:7f:e0:a5:
ab:67:09:88:12:e6:67:ca:a7:12:8c:ca:2b:d8:82:d9:d4:f0:
62:bc:a4:70:c5:fb:66:98:bc:8f:50:f5:4a:64:bb:fa:b0:ca:
32:fa:40:19:91:f5:ad:14:f7:24:ba:e4:cf:9c:21:d5:52:cf:
72:c8:fd:6a:28:90:fc:40:0e:ce:80:77:cb:32:3c:25:24:94:
38:80:f1:00:63:2b:75:86:aa:35:32:b4:d3:45:1f:c6:77:cf:
8b:69:d3:7c:85:a2:d3:48:01:9e:b3:73:7b:b8:99:7c:2b:43:
61:75:8e:a9:29:9f:8b:68:11:42:58:3b:a0:ea:e2:37:fe:5e:
33:18:b9:86:da:94:b2:b9:f5:49:33:e7:27:13:e2:c4:d3:5b:
82:db:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:43 2026 by rpki-client