Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: cdibHiNxvPaw98USt+5mdLPDDgy1ntZErCeZk1IzpJ8=
Subject key identifier: 98:A2:AE:29:DD:B2:CA:5D:2B:4A:C9:39:5F:D6:DE:1C:41:90:53:28
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019CAD22C9EFCFE7E08957786B9F92008676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 17DC
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: wEHnA9BJaYvMyvO90VlyQvhD798PY6jGGm0ekd+WFHc=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c9:ef:cf:e7:e0:89:57:78:6b:9f:92:00:86:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=98a2ae29ddb2ca5d2b4ac9395fd6de1c41905328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:b3:a9:a2:3a:84:a1:5d:e2:56:fb:fe:f2:
79:fc:54:b0:d1:1d:1f:6c:27:98:5d:9a:f4:f0:28:
db:29:cf:2c:31:11:d5:70:eb:8f:2f:5f:3d:d4:24:
a5:bd:52:0d:3b:b7:7a:f9:40:ec:a6:32:46:3f:8c:
f4:75:5c:69:e4:94:02:1c:f2:2a:cd:75:ad:11:4d:
5c:c2:d7:84:c4:ee:4f:3b:c4:8d:fe:15:5a:7c:a2:
4d:ae:9a:96:72:9b:54:b3:ba:86:99:b1:d8:74:66:
72:2b:a5:2c:61:ba:e6:b2:2e:67:0d:32:c2:35:78:
6b:4d:31:c2:f2:9e:44:81:c6:22:67:91:d2:e0:60:
6b:22:29:f2:51:d8:25:35:48:ae:4b:f5:2f:ba:c9:
9f:d7:ab:b0:e6:bd:21:8b:8e:e6:fc:9e:db:c4:20:
a4:be:a5:55:f6:45:e6:86:fd:30:50:16:71:d5:08:
a9:89:b1:73:69:38:ab:18:03:c5:1b:28:e3:bb:1d:
59:e1:0e:9d:9b:8d:87:9d:23:6c:37:b2:df:17:62:
03:0e:9e:3c:af:72:fc:0c:a4:6e:20:13:fc:00:59:
7d:39:0c:5f:70:9b:42:ec:82:6b:ea:88:78:dc:57:
a9:07:e5:76:00:a9:b0:f9:57:ff:56:de:db:f0:55:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:AE:29:DD:B2:CA:5D:2B:4A:C9:39:5F:D6:DE:1C:41:90:53:28
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a7:8a:5a:fe:01:c3:c8:03:4c:4e:62:99:06:61:b0:f0:ed:
5e:4c:bb:b0:de:09:8c:5b:c3:41:62:09:15:b2:3d:40:7c:e0:
48:c7:6b:f8:32:d4:4e:88:4a:88:85:29:43:22:ac:2a:db:53:
52:e8:0b:d7:0f:38:08:94:91:2f:01:22:4d:43:ea:af:7e:c2:
ba:f1:f7:13:be:be:11:e0:95:3d:3e:6e:56:32:92:f6:01:8e:
20:4e:f0:a9:46:52:e0:69:5c:4e:67:31:71:75:23:a4:e6:cc:
b1:19:0c:52:76:ff:7d:95:26:ea:8b:cd:10:f6:13:27:41:ae:
c7:f0:c5:7d:90:e2:6a:be:12:b8:cb:4d:d7:8c:2a:cd:19:08:
cb:44:0c:2b:b6:b8:13:38:f0:2b:33:3e:ee:ea:b1:28:e0:d6:
82:91:88:18:6a:a4:21:fa:75:41:ae:b6:be:a2:5a:80:33:37:
87:08:20:f0:ed:88:41:2e:66:57:de:d9:7f:4b:88:46:f2:27:
ba:42:a1:77:59:c0:26:88:5c:d4:e9:9f:10:71:23:4a:74:15:
55:a8:ce:9f:1e:57:20:39:5d:69:16:72:9a:dc:85:af:97:f2:
59:80:f0:9f:a4:3d:54:48:eb:ff:f0:71:86:7c:2f:e3:60:e4:
6e:c5:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:06 2026 by rpki-client