Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: M9Ui89S8/Wq3hDAOSi1IAKLjfecP7yU3JAR8K0vW1x4=
Subject key identifier: D3:11:02:BF:12:D0:DE:B4:FC:45:A4:EE:6B:F2:9A:48:24:41:CB:F8
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019CAE34F052AC30AE2FFAB81FBECF1618D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0760
Signing time: Mon 02 Mar 2026 11:00:30 +0000
Manifest this update: Mon 02 Mar 2026 11:00:30 +0000
Manifest next update: Tue 03 Mar 2026 11:00:30 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: ORfZc2IUe5FOxe4nbbU+bZ6jiECRMCora9a3Fuw09cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f0:52:ac:30:ae:2f:fa:b8:1f:be:cf:16:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Mar 2 11:00:30 2026 GMT
Not After : Mar 3 11:00:30 2026 GMT
Subject: CN=d31102bf12d0deb4fc45a4ee6bf29a482441cbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:cb:0b:a3:a9:01:1d:63:d9:85:75:92:49:
9d:6d:23:fe:b7:10:16:06:a8:a0:2b:08:5c:19:3d:
69:e2:f0:40:2f:3b:1e:af:7c:3c:9c:53:b9:40:d7:
b2:5d:67:b6:e1:3d:04:d1:dd:1a:da:0e:47:35:55:
ec:56:81:8e:83:d5:cc:23:a0:13:81:e7:78:68:da:
9e:62:d3:a9:7c:03:b2:b2:8a:d2:bc:cf:fe:34:63:
0a:db:14:97:9a:64:1a:1e:67:6d:6e:da:01:53:14:
70:2e:46:08:cb:c2:c1:e7:7d:b4:98:0f:70:c5:0e:
ca:f2:94:68:bc:cb:cf:7e:94:33:9b:8f:48:6c:68:
92:f4:02:02:4c:79:87:fc:75:1a:ee:91:5c:f6:a1:
2f:1d:aa:7b:7d:41:76:2a:2e:a5:57:3d:42:bd:50:
a6:58:0c:f1:63:92:36:65:bf:d4:5f:15:21:18:ac:
ad:5c:97:97:81:84:f7:28:a3:8e:ba:a3:54:a4:44:
75:20:46:73:08:f8:34:17:0b:22:07:9a:ab:79:c9:
81:9b:26:74:c8:ec:9d:5e:91:5e:e7:56:82:29:76:
49:f4:1b:80:a6:0b:74:39:8e:3a:ca:a8:44:86:b5:
e8:1e:99:8d:78:44:7c:6d:70:08:e7:1d:3f:47:61:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:02:BF:12:D0:DE:B4:FC:45:A4:EE:6B:F2:9A:48:24:41:CB:F8
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2c:ab:84:a7:f5:de:c6:d1:cb:71:d3:a9:5a:2c:59:93:e3:
f0:a5:8b:fa:9d:d9:68:0e:9f:9b:ce:e2:73:27:c2:b6:ee:75:
31:c5:9d:ce:47:c6:df:40:9d:19:1f:15:d0:fa:da:8d:9b:c5:
36:4f:64:02:ad:77:d7:9a:cd:d0:65:df:e5:81:82:2c:67:17:
6b:f4:90:75:2e:fa:64:db:e2:40:f2:a7:e1:75:5c:14:71:d4:
f1:9b:d6:a8:f8:6d:50:13:60:4e:34:82:a6:44:f0:6a:7c:ed:
33:34:df:ac:f4:e5:58:d6:1e:d7:90:c0:4f:37:3e:b1:cd:50:
09:46:0d:e4:21:f6:ec:f3:1f:5c:67:60:ba:b2:f3:7c:db:65:
d0:5c:ab:4f:38:c0:14:2b:aa:e1:f2:ef:3a:d8:30:5d:d5:00:
57:8e:0f:c4:98:b8:ed:4d:ce:ce:2f:63:e0:4a:1f:4c:21:0e:
ec:d7:86:47:dd:99:b1:2e:0a:68:67:7a:79:53:06:d8:a5:b9:
d3:b3:e8:cf:b4:bf:66:7e:fc:61:89:87:de:db:b5:a9:9a:7a:
ed:56:31:da:85:c0:ea:06:98:fe:32:eb:49:9f:e1:67:af:eb:
15:af:a1:94:28:0b:59:35:6e:19:72:38:3b:ff:e5:2a:8b:e2:
df:3c:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:49 2026 by rpki-client