Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: E+Mm2rayZH9gWjpWYbdL1wOSS3x8WKGZkQ0fVgCjDTM=
Subject key identifier: 82:AE:58:FB:B2:5B:BE:62:66:3B:D0:5B:F0:C8:65:38:73:A6:A5:81
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019CAAC707D86C0A43DD3E6FE5C506827A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1653
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: nAkD3DZ4UkuEJDqa/eqrnSStCKfjvSxMBELD8wAlUCA=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:07:d8:6c:0a:43:dd:3e:6f:e5:c5:06:82:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=82ae58fbb25bbe62663bd05bf0c8653873a6a581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:45:4a:50:c7:2f:5a:9a:55:c0:7c:7e:86:
ac:f4:1c:a2:d3:87:13:a7:4a:aa:6f:e1:ed:6a:cf:
73:de:7e:8a:3d:c2:c4:31:8f:c8:51:a9:a9:0d:fe:
cf:1a:2b:c3:69:8d:36:62:34:38:57:97:ed:94:c3:
fa:f3:8b:bc:25:ab:3e:b2:87:1b:62:6a:47:fe:52:
4e:10:33:a5:27:cb:b2:2f:70:c9:63:ae:23:b3:50:
cd:e3:02:11:04:df:58:b3:78:54:1b:c2:2c:59:af:
fa:2d:08:eb:52:60:2a:90:fe:3c:b9:51:50:45:c4:
ae:5b:8f:ff:c7:09:b7:80:3f:b3:97:7e:1e:85:e9:
fb:3a:40:1d:69:c6:8e:e3:bb:0b:6f:7e:bb:70:16:
99:62:93:d8:27:ae:81:0c:1e:60:5a:e4:67:50:e4:
f0:77:1c:c8:d0:38:95:8a:ee:34:47:74:6b:9b:db:
2a:00:4a:ff:59:9b:7e:02:5d:e3:b0:f7:6a:fc:40:
4f:e2:5d:62:1a:9d:1b:ef:56:28:eb:d2:f6:63:f0:
c6:52:b0:02:76:da:63:a1:70:e3:99:0b:cc:10:c1:
04:c4:bc:26:80:76:9e:de:85:be:29:df:68:1b:55:
90:13:1a:a4:b9:86:a6:40:27:7f:e3:1e:c4:10:ca:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:58:FB:B2:5B:BE:62:66:3B:D0:5B:F0:C8:65:38:73:A6:A5:81
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0e:01:e4:cc:61:aa:47:f0:80:7d:3e:5d:23:07:49:f8:8d:
e5:6e:86:9b:f5:96:7c:e1:92:da:fb:2d:66:ac:9f:8c:dd:21:
c4:ee:c3:9c:71:96:86:09:26:e8:52:42:e0:7a:8d:a9:07:26:
8e:7d:ba:0d:78:27:6a:55:b2:36:29:b9:3c:30:17:81:2c:b7:
d7:6e:ed:36:d1:57:97:a9:b4:07:6a:8f:3e:d9:ad:42:bf:89:
a7:08:57:98:de:f8:db:15:a7:d4:bb:98:b4:41:eb:bc:39:d9:
ad:f8:8c:80:d3:6d:a1:ab:42:76:41:1d:e5:e9:fe:7f:45:6a:
0e:82:da:2f:a5:45:8c:02:1c:e4:60:e3:5a:ab:d6:3e:d7:3e:
c6:10:93:36:96:14:67:16:75:88:66:8d:8d:fd:98:d1:8b:b1:
71:48:c0:01:7b:f8:d2:4e:72:b5:f6:3a:19:5d:40:42:e5:2c:
ca:e0:f8:6a:28:91:d6:1a:1b:24:d2:69:bf:7d:df:ee:42:a7:
04:ef:af:42:e8:41:74:7d:57:0b:84:24:bb:93:4c:e1:4e:e2:
02:03:2c:96:a5:1c:11:e0:8e:19:4b:ca:aa:17:80:86:eb:8e:
45:52:e2:b3:0d:05:a4:64:6c:a8:c1:8f:5b:35:be:27:5e:e0:
f6:12:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:35 2026 by rpki-client