Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: 0O3vGqy38GgQB4VzyD/6egsDNgayJAUXu7lOk1+yJzQ=
Subject key identifier: 31:08:8B:91:E0:83:3C:C8:71:5A:C0:3D:9E:D6:99:48:5B:9E:CA:5C
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019CAD903FC9358B1ED9634E7B038DC858FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0BC5
Signing time: Mon 02 Mar 2026 08:00:37 +0000
Manifest this update: Mon 02 Mar 2026 08:00:37 +0000
Manifest next update: Tue 03 Mar 2026 08:00:37 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: 5Vhs+2Yp8KbuK2LLFiSDov/aqEv+9lythZtYTDGspw4=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3f:c9:35:8b:1e:d9:63:4e:7b:03:8d:c8:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Mar 2 08:00:37 2026 GMT
Not After : Mar 3 08:00:37 2026 GMT
Subject: CN=31088b91e0833cc8715ac03d9ed699485b9eca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:45:bf:55:aa:80:30:37:34:e9:d2:26:71:
d6:14:b6:c5:20:ac:74:60:67:fe:bb:d5:28:09:1a:
6b:b7:25:e6:0b:83:ff:76:cc:66:73:ab:71:c1:ea:
e4:a0:5a:ec:a2:d6:47:62:53:e8:20:c1:89:2e:6e:
c6:f3:8d:7c:41:08:a8:c6:a5:51:d4:67:b0:fd:9c:
73:43:d8:ae:d9:a8:c8:de:7a:3b:ae:74:c8:c2:83:
c9:b4:7c:f2:7f:51:0a:cd:38:45:92:1b:f5:72:9e:
2c:39:6f:09:c5:ed:cd:ca:d3:63:1d:b5:80:32:c8:
28:e7:48:22:50:f9:c7:4c:e4:c7:95:bb:2a:3f:59:
7b:b9:68:b7:51:99:ad:f0:60:c7:4c:e9:b8:3b:69:
ef:45:04:29:18:70:38:77:4c:3b:01:e4:a0:19:23:
1e:28:fe:ca:2c:26:19:27:af:fc:66:08:21:50:bd:
dc:c4:70:09:c6:d8:1d:26:ac:b5:93:06:14:bb:de:
5e:8f:0f:97:bc:04:fb:0b:71:9e:5b:9a:65:c0:bf:
1a:8c:3c:a9:b8:f6:95:42:3e:5e:20:56:ce:a9:21:
42:dc:bd:96:44:3a:ab:bc:32:2b:a1:2b:d0:e1:8c:
7b:e0:f7:a2:97:bf:5e:13:00:12:3a:b4:03:d3:98:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:8B:91:E0:83:3C:C8:71:5A:C0:3D:9E:D6:99:48:5B:9E:CA:5C
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9d:83:58:3a:88:ef:c4:9c:f9:48:d5:cc:f9:d1:00:e3:9d:
21:bd:58:99:fb:d2:28:fa:f2:0b:56:fe:1f:48:07:6a:61:07:
a7:c5:97:a9:52:0d:63:5b:b0:bb:93:43:53:30:24:1a:da:e6:
6e:62:28:af:1b:29:24:d4:50:e8:cc:1b:3f:1f:f7:27:12:92:
d8:35:d7:4c:c6:10:da:c4:9d:cb:16:b1:ff:aa:a4:af:6b:dc:
eb:c4:70:8f:cf:51:48:9d:e3:23:e2:25:e4:98:ca:77:16:19:
55:0e:06:1a:cb:4e:33:d5:5f:2e:dd:5b:b6:c9:dd:6c:7b:64:
7d:46:23:db:44:e8:57:f8:2f:88:47:f5:e0:0e:f5:ba:2c:6a:
fa:fc:bf:11:63:15:f6:83:80:b7:37:ea:3d:4e:35:c6:c2:66:
ac:d6:f5:5a:3e:72:1a:98:aa:32:2e:5e:0c:ac:0d:b1:2e:d3:
85:0b:6b:06:e9:54:8c:62:f4:26:a5:35:40:c0:42:9d:a8:d2:
83:61:3b:4b:66:54:1c:c3:7d:2a:6e:c2:69:51:88:53:5b:2f:
c6:cc:bc:59:e2:7c:5a:f3:44:a6:50:d8:06:95:41:2c:49:32:
9b:35:d2:88:fb:af:35:ea:c3:fa:ac:96:31:c2:d9:05:4c:c2:
94:98:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:04 2026 by rpki-client