Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: NxfL1IQs8h7xtn2sbzuMT9nON3NtHDv+n1LYixztiko=
Subject key identifier: 62:4A:A9:27:65:BE:0D:44:97:D4:29:0B:25:45:89:59:71:74:D0:6D
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019CAEA3804E1AEF76BE4A04F85F16FA1909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0CD7
Signing time: Mon 02 Mar 2026 13:01:16 +0000
Manifest this update: Mon 02 Mar 2026 13:01:16 +0000
Manifest next update: Tue 03 Mar 2026 13:01:16 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: 6K2d0GTXWaNuArJ1vXkPbqJwqOzeHsI6LOPk415yn6Q=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:80:4e:1a:ef:76:be:4a:04:f8:5f:16:fa:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Mar 2 13:01:16 2026 GMT
Not After : Mar 3 13:01:16 2026 GMT
Subject: CN=624aa92765be0d4497d4290b254589597174d06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:77:0e:46:3f:9c:6b:78:a3:b4:d5:f5:62:
44:82:40:89:41:ec:8c:5a:a0:0d:a9:eb:f1:96:60:
0d:49:c8:df:12:30:40:d6:3a:e9:33:75:c5:e2:b5:
b5:e0:1c:56:9c:13:bd:d2:1a:a2:2f:10:15:ed:24:
08:9a:fa:70:7f:70:f1:41:93:27:19:ff:d9:0a:36:
9a:d5:93:d3:d1:63:ab:d7:75:69:b3:a5:b4:bd:d1:
0c:2f:91:40:c9:93:a6:6c:da:f4:26:65:5b:4b:7f:
a2:5c:97:a8:d1:b2:cd:19:92:31:db:86:b5:59:d8:
10:bd:e6:48:91:fa:e0:69:95:27:c4:51:a0:47:8b:
ad:fa:32:30:2f:0a:62:b7:ff:bf:ba:2c:89:36:0d:
6e:6e:ab:eb:ae:a0:38:05:0c:64:f6:ae:9b:aa:c6:
b3:f7:cf:dc:79:b2:78:ea:78:56:49:b6:98:4f:39:
48:b9:d5:ad:05:7f:45:2d:ab:9b:3c:e7:62:77:3e:
31:e5:e8:4e:47:50:bf:74:d9:55:10:9b:d9:a7:76:
b9:08:b9:81:89:59:91:22:a8:ff:f3:e4:92:5d:95:
52:c5:57:7d:58:69:97:9f:52:82:7e:dd:c4:19:59:
f2:a7:34:22:91:b1:bf:29:09:fa:18:41:c2:71:8c:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:A9:27:65:BE:0D:44:97:D4:29:0B:25:45:89:59:71:74:D0:6D
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:96:60:8d:fc:28:f1:41:b6:ab:08:93:ac:0c:d1:13:77:1a:
91:e3:97:35:f0:1e:90:f1:a3:0a:92:9d:76:db:8f:df:0e:f0:
e8:ec:23:70:ad:07:70:36:c0:35:25:3a:fb:77:c5:61:b8:f3:
65:37:b6:c5:f6:30:04:8e:8f:97:1b:84:1e:99:bd:64:93:87:
27:55:31:14:03:c9:14:90:79:09:37:3d:d6:28:5c:7b:04:15:
8d:82:c2:5b:cc:26:a0:59:97:f2:65:14:8d:f4:e5:0a:bd:be:
ed:77:20:29:7f:57:bf:73:c6:92:85:8b:91:f7:c8:fd:c1:a4:
80:74:ef:ef:4b:4d:b2:4c:3e:8f:27:f7:a6:89:dd:dc:d7:45:
ac:6b:76:18:5a:b9:2b:16:84:bc:24:31:35:39:b1:d1:5c:2f:
22:67:0a:55:59:4b:9a:a6:4a:7e:a1:42:51:8d:f4:ff:42:37:
0a:79:86:99:84:f5:ef:2a:fc:cc:4a:de:60:28:28:e2:c7:6f:
35:a1:fd:6a:78:aa:05:5a:71:3b:e5:70:8e:84:fa:41:a8:b5:
18:9d:e9:61:b3:9a:2b:79:54:c9:d1:99:0c:aa:34:53:21:47:
26:81:cc:d7:39:ca:9a:48:cb:40:e0:48:f1:f4:6f:ad:88:50:
d3:ac:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:08 2026 by rpki-client