Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: fW5Qymbn7GRuNTedY5v6VXPtabTLOevKb6SKWyGQ+2A=
Subject key identifier: 79:4D:1C:B8:15:98:2D:65:17:3D:C2:30:E2:C4:6A:25:59:1C:60:A9
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019CABD95405FBD697E999D859BB256B90D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 16C8
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: 4wsyJGG5uOjkHxFHZDBxS9huMyLEyJfvHvsBeK7lI/w=)
2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:54:05:fb:d6:97:e9:99:d8:59:bb:25:6b:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=794d1cb815982d65173dc230e2c46a25591c60a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:a9:ed:e5:90:ea:e0:d1:2a:d6:01:09:7e:
ac:47:64:b6:4b:43:b9:1d:6d:8c:d3:4e:da:f2:00:
9c:d2:b1:e3:72:6b:ec:ce:a2:f3:6c:d4:ae:6f:30:
f7:0c:92:7c:c6:89:88:85:fb:c4:1f:a5:9f:8e:af:
0f:79:3a:6d:e0:62:19:bc:6d:8f:a5:f1:23:1a:7c:
f9:53:cd:c2:51:22:94:0d:4f:b2:3c:8e:ee:d7:09:
2d:0d:5b:15:d5:eb:d5:7f:88:e2:dd:94:0b:f9:50:
00:6b:ee:dc:89:ab:8f:46:e0:24:81:21:ee:49:75:
c6:c0:2b:57:2a:28:01:aa:46:76:b7:f6:d3:98:d7:
fa:83:a5:2b:2b:07:3b:81:fc:13:2a:04:9d:e8:cc:
dd:02:d8:56:c1:eb:bd:7e:ef:60:d6:46:06:a3:1f:
ce:47:25:33:1f:86:55:f6:d5:15:79:a3:7d:a0:76:
4d:6c:df:a1:24:5e:be:f6:0e:ad:f4:c7:b0:e1:77:
0e:a9:af:e3:f4:ff:63:cf:81:80:5a:40:c8:58:f8:
f1:7b:33:56:11:40:83:ab:c3:fc:58:aa:6c:aa:26:
13:6f:2d:ea:6d:2c:98:cf:1a:81:e6:cd:df:45:16:
f9:5b:87:b0:af:1d:40:9b:c9:04:d8:a9:d7:ac:1f:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:1C:B8:15:98:2D:65:17:3D:C2:30:E2:C4:6A:25:59:1C:60:A9
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:d2:bb:d6:4b:f4:b5:64:51:78:43:09:e9:1b:a2:7c:e2:
a2:77:a5:66:9c:f5:36:1f:e1:f0:16:28:cf:63:26:42:ff:40:
0b:a7:33:77:9e:4f:f2:2e:d4:bf:9d:00:2d:d9:0f:dc:5d:e2:
61:03:dd:08:f6:08:5e:ed:02:0a:06:69:46:41:79:3b:37:3b:
41:61:28:33:78:76:71:a7:30:c5:40:90:e2:a6:f6:e5:67:32:
b5:2a:f7:a3:8f:d4:b7:41:b0:e9:ef:cb:54:2a:53:72:c6:6e:
b5:bf:7e:4a:e3:8a:8f:fd:5c:ad:8c:c4:99:94:21:15:bc:d1:
3a:0c:92:95:4e:d4:0a:74:cc:47:45:8e:1f:00:f3:b0:48:91:
e3:86:b2:80:3a:ce:09:1c:ee:a3:e7:c1:84:11:89:68:11:22:
72:db:33:16:2b:8b:6c:c1:01:5b:2b:e3:b5:b4:39:84:4c:a7:
02:23:11:ab:a6:26:ab:78:52:63:74:d0:97:56:56:eb:bf:4c:
7e:36:a5:28:b2:0c:dc:ee:6b:19:e4:a3:cc:1d:0c:fb:a5:8b:
43:88:ba:63:26:fd:e8:79:60:ea:a6:a0:a2:0a:02:a5:c5:c0:
ba:3a:4b:4d:32:00:78:37:be:5b:0a:d1:82:3d:e8:97:5e:e1:
f0:f4:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:48 2026 by rpki-client