Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: G1H40/bK38ZxYazT4QRrwcbBN68Dj8BoA4mmEKi0iAY=
Subject key identifier: 62:E1:0A:E3:E9:7F:E6:B2:32:8D:10:60:B5:8D:CF:46:05:2B:26:06
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 019CADC8239EFBE362D20AF01F55A24680A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0BF1
Signing time: Mon 02 Mar 2026 09:01:40 +0000
Manifest this update: Mon 02 Mar 2026 09:01:40 +0000
Manifest next update: Tue 03 Mar 2026 09:01:40 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: taEd8Ysu2DzJHToFuztO3+P30rlFI5aAYpdr/+9uhqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:23:9e:fb:e3:62:d2:0a:f0:1f:55:a2:46:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Mar 2 09:01:40 2026 GMT
Not After : Mar 3 09:01:40 2026 GMT
Subject: CN=62e10ae3e97fe6b2328d1060b58dcf46052b2606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:8f:ae:ae:58:32:e4:b8:73:a0:86:a6:f8:
d1:3a:27:85:ea:ce:a8:41:f4:cc:14:be:b2:73:80:
19:1d:2a:61:e5:95:62:c7:98:3e:34:d9:20:18:bc:
a9:c9:71:d6:39:8f:36:7a:c7:5f:1b:3d:04:82:fc:
97:84:57:0a:a5:1d:6d:44:31:3a:63:b3:35:34:01:
6f:33:c0:b0:a4:90:ce:ad:01:77:41:23:1b:eb:83:
da:79:06:05:ec:c0:bf:54:6a:92:a3:ab:4d:a1:8b:
80:97:af:b1:f9:85:5a:5b:04:59:c6:b0:31:2e:68:
e2:7f:a9:f4:ac:e0:57:cc:2f:16:40:f6:93:95:4a:
94:46:43:fa:52:b7:c7:c5:93:03:b2:01:46:af:81:
33:7e:69:0b:87:82:4b:1f:bf:ea:fc:00:35:28:1c:
a0:5a:71:05:10:e1:25:ea:bc:0f:5b:5b:0b:7f:f3:
8b:9c:9b:58:04:ea:fa:00:af:4d:88:12:fc:00:a8:
bf:8b:34:5c:71:14:b1:4a:d3:dc:28:3c:1b:37:0f:
b6:54:a5:70:07:34:06:c4:cf:95:fd:21:79:51:8d:
7a:27:4f:c2:05:ac:fe:c9:a9:16:7d:42:9d:ee:36:
d2:a2:35:70:07:15:07:39:3d:fb:05:cd:15:2c:f8:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:0A:E3:E9:7F:E6:B2:32:8D:10:60:B5:8D:CF:46:05:2B:26:06
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:54:89:05:24:46:1e:21:dc:3d:da:e0:f7:fb:95:26:23:
95:bb:08:7f:45:d9:8f:a3:4c:28:2a:96:af:cc:40:c7:e7:83:
20:a6:b4:77:75:14:20:a7:29:37:39:98:66:10:15:3d:09:17:
67:61:01:fe:d7:38:4f:6b:27:2b:ee:67:91:d6:85:2d:5a:06:
1b:ad:5b:07:08:8f:c1:36:5a:39:3e:ba:af:00:30:0e:ec:a2:
eb:cc:d1:19:7e:8c:11:38:6f:c0:06:35:53:b0:f9:64:c0:50:
24:9c:f8:0c:f9:2d:1f:20:e1:3c:2d:36:0d:f9:9a:c8:a3:cf:
d7:0f:b4:8e:d2:07:52:0f:a9:46:55:bc:47:7e:bb:15:da:83:
ef:ee:fe:78:b2:3c:9e:26:0a:89:a9:c5:f5:91:af:69:da:2e:
96:31:f1:01:60:91:ce:fb:5f:39:95:ed:71:6a:a9:be:e0:6a:
1e:61:4e:c8:ba:4d:66:17:33:54:ae:7c:21:5b:aa:30:af:8b:
1c:ba:59:52:20:26:2b:ba:d2:ce:32:77:63:b4:4a:52:0b:ce:
52:30:26:b6:98:c5:b7:b0:a8:d3:90:dd:5e:36:8b:29:4b:2f:
09:3f:aa:62:49:ba:08:e6:26:68:9c:2f:8a:3e:85:d4:d9:4e:
79:1e:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:12 2026 by rpki-client