Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: c2LJMP6jwlfWQ5up6P8+XoLP8UL6wwWOBnYENLUtedE=
Subject key identifier: 15:4D:9E:14:9D:5C:AB:8B:4B:0D:EC:52:4D:EB:79:76:B4:C1:17:6E
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019CAAFD61E2B1BF7BFB4AC49FEC310F7C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 08BE
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: YwUaNIU997e+qCiIMxZ8Q8ZzKE8OVoULjPXneejMWMU=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:61:e2:b1:bf:7b:fb:4a:c4:9f:ec:31:0f:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=154d9e149d5cab8b4b0dec524deb7976b4c1176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:cd:c8:6c:b1:ff:3a:8e:7d:a9:f6:46:99:
cf:4f:e9:dd:be:ba:38:30:66:f0:1b:40:a8:58:77:
7f:72:aa:2c:59:12:bd:ac:bd:bb:81:8f:e1:0b:94:
78:cf:7d:43:fb:05:b9:75:4b:e1:79:31:05:ec:72:
5d:e0:f4:93:d2:f8:32:46:d2:d1:09:a3:0d:3a:05:
89:ba:70:f6:80:c2:30:e2:cc:fa:6f:14:3a:4e:e9:
a4:c9:71:7f:14:d8:a8:11:2c:e5:d5:3d:7f:8a:41:
e9:32:54:7d:51:99:f2:94:26:21:f9:48:f7:a9:10:
99:11:a2:d4:c6:eb:73:a8:d7:7a:2f:ec:cd:64:48:
40:30:03:fd:05:f4:0b:5c:16:8e:ae:c1:63:a2:f1:
f2:16:6b:80:74:05:fd:c8:9e:e4:50:ed:2d:bf:98:
85:cc:f2:c3:43:e3:8e:b8:78:dc:a7:ef:d1:3e:74:
b2:5b:14:73:e1:bc:3d:3c:a8:8e:99:de:8e:b1:b3:
71:8d:ab:05:c2:b5:2d:5f:2e:ff:4f:e5:36:a4:ce:
ef:f7:18:2e:e0:9f:a8:f8:e2:8b:dd:17:d0:1a:ce:
59:cd:7b:1d:5d:34:09:c3:dd:88:a9:f1:8e:d7:65:
1a:aa:4c:d9:06:00:b9:e4:b9:52:4f:a0:fd:55:54:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:9E:14:9D:5C:AB:8B:4B:0D:EC:52:4D:EB:79:76:B4:C1:17:6E
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:f4:64:25:cc:fd:fc:ad:16:c2:7b:a9:5b:ce:1f:26:bd:
b6:3f:c7:38:2f:b0:d1:ee:de:a7:67:d1:6d:f5:3f:c1:09:10:
4e:43:1c:2b:2c:ae:0e:fc:0d:90:c5:41:ed:69:30:09:c8:01:
73:fe:8d:46:40:42:b7:28:b2:6a:1f:4b:8e:23:77:a3:93:b5:
b7:eb:21:87:4b:a1:06:4d:26:f4:7c:0b:d6:96:5e:2b:2d:f0:
fe:64:74:84:60:99:02:0c:f8:65:ec:bd:e9:98:07:f0:80:22:
f7:e6:a3:bd:73:42:3b:b7:3d:64:ae:49:ef:2a:8c:5b:b2:44:
39:8f:1b:f8:31:26:b3:7c:76:e1:1c:23:5e:5d:54:9e:b6:a4:
9d:b2:37:8e:0c:6e:61:43:ea:38:9e:28:b0:8c:42:fe:58:05:
ca:b7:76:9c:a1:14:7f:80:a4:ea:0e:8a:fc:d6:bc:3c:34:e0:
cb:8b:37:68:a8:84:cb:c1:8b:07:af:e6:f6:0f:92:a0:d2:6d:
4c:03:b5:62:b3:ab:a6:b1:f0:72:8b:d9:dc:89:74:b4:fa:44:
ea:3d:d3:7b:d5:7f:24:59:98:53:6a:61:5d:9c:cc:48:7f:01:
0b:3a:2d:42:6c:0c:5d:e9:1c:0f:b6:3b:6a:9e:34:30:9d:28:
8b:61:84:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:00 2026 by rpki-client