Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: DW235TJD2n/CnwcKAwW0GODh1hpDW+sMVP7izTqoBLA=
Subject key identifier: 36:8E:9D:5D:03:BF:7D:F2:01:4B:34:8F:7E:3F:28:89:1B:00:7C:A8
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019CAA8FCF85D8024532133D2C0589A58D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 0FA8
Signing time: Sun 01 Mar 2026 18:01:17 +0000
Manifest this update: Sun 01 Mar 2026 18:01:17 +0000
Manifest next update: Mon 02 Mar 2026 18:01:17 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: TzXciGCkOjXQdZmPvOiT501QMc9zRYxEfqenZ3aMz4E=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cf:85:d8:02:45:32:13:3d:2c:05:89:a5:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Mar 1 18:01:17 2026 GMT
Not After : Mar 2 18:01:17 2026 GMT
Subject: CN=368e9d5d03bf7df2014b348f7e3f28891b007ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:89:27:69:1a:f3:9a:eb:fe:02:46:f2:1f:
ef:dd:7b:84:41:fa:49:8f:82:1c:c8:62:45:7b:00:
08:52:7a:7d:2e:dc:d9:af:0c:50:f6:5f:a5:70:0d:
e7:7e:5e:8d:3e:d1:5b:2b:28:ab:d6:2f:6a:cd:82:
66:7f:d5:07:8d:38:c1:37:00:02:40:11:91:8f:47:
c0:79:94:e9:d9:bc:74:e1:c7:2a:ec:78:a0:4e:0c:
ba:9b:d5:64:98:d2:1e:a5:a8:f7:69:a2:92:66:64:
d2:8f:84:78:80:39:82:b3:cc:b3:b6:f8:f4:63:ba:
a9:d3:c5:e1:2a:e4:4d:ba:2d:ea:fb:06:a4:77:e9:
86:3b:b0:02:d4:0f:de:fd:a2:bf:b5:62:78:2a:c8:
97:16:1a:5e:ef:cc:d4:a8:9f:89:0c:a4:c7:77:b4:
11:26:13:1b:65:09:ff:ae:59:c4:33:8d:fb:b3:d9:
9a:a2:1c:56:97:76:49:21:b9:f1:f1:00:59:6f:cf:
0b:15:c5:85:10:7f:16:09:b6:14:04:ff:4d:d1:1f:
27:39:8b:50:68:b2:95:0e:3f:58:74:4e:ef:8a:d4:
82:cc:95:8e:21:00:cd:c6:af:a9:84:80:62:06:5b:
f0:ae:f9:d6:fa:dd:6d:cc:ba:0e:74:5a:e0:da:ac:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:9D:5D:03:BF:7D:F2:01:4B:34:8F:7E:3F:28:89:1B:00:7C:A8
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4c:c3:71:08:39:60:a4:61:3a:73:95:22:4d:6e:41:b8:cb:
75:25:c9:56:71:bd:d8:12:1d:3e:11:d8:5f:5e:cb:7c:1d:a8:
73:ae:87:86:bd:45:e7:9d:21:41:a8:80:86:90:4d:ad:14:2a:
a9:dc:f7:7b:f9:05:dd:e6:af:92:82:53:20:2a:3a:63:32:d6:
bf:01:b5:8b:69:77:da:2d:85:6e:c0:e6:e7:41:07:9f:9e:1d:
9f:a6:ff:c8:fa:1b:54:cb:af:f7:f2:cd:eb:e1:18:74:20:58:
31:7a:60:d7:4e:f6:d8:7c:f1:b4:9d:2f:a3:91:76:22:6d:14:
df:66:3b:34:89:49:5d:16:10:49:42:c1:ef:57:d5:c9:75:26:
08:b3:e2:b0:cb:33:43:ac:c5:19:a4:01:78:bd:8b:15:18:af:
d7:5a:d6:47:ce:40:8d:c3:61:8f:e9:75:ad:c8:03:78:a2:60:
4f:3e:31:82:be:fa:5a:57:73:db:56:0f:be:89:0f:f5:8b:b1:
d4:57:36:5f:8c:c3:02:e7:58:39:7e:c6:3d:94:96:fe:62:7c:
61:e5:be:db:c6:e3:2a:3d:19:eb:67:6d:a5:ed:b5:cd:7e:3c:
8a:53:e7:4a:de:4a:f7:e6:08:4d:00:f9:76:b9:92:70:fa:c6:
36:d9:f8:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8+F2AJFMhM9LAWJpY2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzg4MjMyYzA3ZGUyY2RjYjk2ZWFmOWU3NTE1NTBiYWE2
NmM1ODgwHhcNMjYwMzAxMTgwMTE3WhcNMjYwMzAyMTgwMTE3WjAzMTEwLwYDVQQD
EygzNjhlOWQ1ZDAzYmY3ZGYyMDE0YjM0OGY3ZTNmMjg4OTFiMDA3Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+GJJ2ka85rr/gJG8h/v3XuEQfpJ
j4IcyGJFewAIUnp9LtzZrwxQ9l+lcA3nfl6NPtFbKyir1i9qzYJmf9UHjTjBNwAC
QBGRj0fAeZTp2bx04ccq7HigTgy6m9VkmNIepaj3aaKSZmTSj4R4gDmCs8yztvj0
Y7qp08XhKuRNui3q+wakd+mGO7AC1A/e/aK/tWJ4KsiXFhpe78zUqJ+JDKTHd7QR
JhMbZQn/rlnEM437s9maohxWl3ZJIbnx8QBZb88LFcWFEH8WCbYUBP9N0R8nOYtQ
aLKVDj9YdE7vitSCzJWOIQDNxq+phIBiBlvwrvnW+t1tzLoOdFrg2qzWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaOnV0Dv33yAUs0j34/KIkbAHyoMB8GA1UdIwQY
MBaAFN3IgjLAfeLNy5bq+edRVQuqZsWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGIt
NDJjNzliMDNiNGRmLzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGItNDJjNzliMDNiNGRm
LzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkzDcQg5
YKRhOnOVIk1uQbjLdSXJVnG92BIdPhHYX17LfB2oc66Hhr1F550hQaiAhpBNrRQq
qdz3e/kF3eavkoJTICo6YzLWvwG1i2l32i2FbsDm50EHn54dn6b/yPobVMuv9/LN
6+EYdCBYMXpg10722HzxtJ0vo5F2Im0U32Y7NIlJXRYQSULB71fVyXUmCLPisMsz
Q6zFGaQBeL2LFRiv11rWR85AjcNhj+l1rcgDeKJgTz4xgr76Wldz21YPvokP9Yux
1Fc2X4zDAudYOX7GPZSW/mJ8YeW+28bjKj0Z62dtpe21zX48ilPnSt5K9+YITQD5
drmScPrGNtn40Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:58 2026 by rpki-client