Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: 0cF8/yv2GtO5yXdezuoTYEXWOMbJd9h40T4FMug2CYc=
Subject key identifier: 38:A0:F8:1D:5E:4B:02:DB:C7:63:B7:52:4D:A5:7A:45:3A:FA:53:4E
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 019D97E2316DD1A3EA35E19090F2B1C74FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0FFB
Signing time: Thu 16 Apr 2026 20:01:16 +0000
Manifest this update: Thu 16 Apr 2026 20:01:16 +0000
Manifest next update: Fri 17 Apr 2026 20:01:16 +0000
Files and hashes: 1: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: JtqA989JVXE8UzZyzcRvD6dp3Lz2eO5yPLfAR50yuJ8=)
2: _EAdbKIlNCwppTUnYtOH719X6EU.roa (hash: Jm0d38jKbNV/SfdJd3VVcUEtQMJ+UWyy4HHgcaknpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:31:6d:d1:a3:ea:35:e1:90:90:f2:b1:c7:4f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Apr 16 20:01:16 2026 GMT
Not After : Apr 17 20:01:16 2026 GMT
Subject: CN=38a0f81d5e4b02dbc763b7524da57a453afa534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:a1:34:a1:ec:1e:ee:ee:9f:cf:89:d3:a9:
c2:83:60:d5:ad:01:5d:00:b1:59:04:04:e9:b6:f6:
d7:6e:75:24:d7:6e:1a:f8:09:ce:89:f8:7b:65:b7:
7d:1c:3d:71:4c:cb:e4:61:1a:54:02:fa:f1:39:4e:
17:ed:a0:3e:27:51:7a:7c:7d:e6:a2:47:c7:c6:bd:
1d:95:25:63:b7:06:33:54:72:15:a6:c2:2f:79:22:
c3:39:af:5a:9e:53:fb:9b:19:70:27:6b:e5:80:c6:
7b:96:5f:ae:67:73:db:b9:a3:24:41:36:af:df:7f:
f0:88:b8:59:39:68:cf:ec:a0:18:f7:ac:c7:1b:f0:
42:d8:97:a3:2b:05:ff:e6:66:b5:e9:de:d7:c4:5e:
fa:db:ca:09:9d:30:7c:81:18:db:6c:e9:5b:09:cf:
c0:ed:7f:1c:7f:13:8e:0d:34:aa:6f:c8:63:2b:8a:
05:31:de:03:4a:7b:d1:7a:d7:cd:0a:f5:a7:89:38:
76:04:59:57:4b:0c:66:eb:6a:86:85:d7:65:ab:d3:
8e:96:7a:8b:42:9c:0f:cd:1b:5f:5c:52:ca:3a:ed:
9a:2f:1d:d0:94:87:cc:59:b8:37:9e:60:21:e4:ea:
f1:6d:77:11:e4:fb:68:28:c7:09:7e:7b:cd:6a:c4:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:F8:1D:5E:4B:02:DB:C7:63:B7:52:4D:A5:7A:45:3A:FA:53:4E
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bf:ea:09:3c:dc:f1:14:2f:bd:60:95:1c:d4:7f:84:b7:79:
56:15:36:f6:d0:be:d8:00:b6:e5:ad:8a:de:b2:72:fd:44:45:
26:ad:d3:0e:28:40:ad:26:cc:59:2b:f6:48:a6:25:9e:37:a2:
6f:93:11:51:a8:84:18:b8:2c:a0:ed:b9:c4:c3:73:bd:35:06:
1d:bd:85:57:6c:4b:28:30:57:3f:ee:da:ce:ec:58:56:0a:26:
6b:b9:df:29:b6:d8:9c:95:cb:a9:24:15:de:3f:dc:d3:b4:bf:
23:af:89:79:63:69:77:d6:13:f9:91:9a:37:68:17:2b:39:4c:
5f:e9:41:1a:6e:4b:47:18:ca:15:15:43:92:4f:72:d1:f5:c1:
49:f7:f4:6b:39:6d:2c:fa:24:bd:2a:d6:c8:88:6b:a1:4a:e8:
b3:11:9a:e2:bf:8f:5c:3e:04:2e:7c:24:cc:b0:3a:08:15:de:
ec:25:f2:15:94:c8:a1:58:78:6d:46:3a:d4:45:51:d8:ec:37:
b5:96:77:db:67:58:b3:ab:d7:2e:b8:9d:e6:8a:ca:47:00:6c:
c3:da:92:97:90:fc:51:f5:a2:7f:62:b8:87:59:35:0b:77:35:
65:86:c5:71:d6:ed:c4:14:43:da:d6:66:a8:b9:77:ed:7f:da:
a8:44:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:58 2026 by rpki-client