Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: SbKsKhoMoXjmTrol4JZrwKUFZd89+9/BQdr+sA0ZwCU=
Subject key identifier: 9E:13:54:9C:DC:C8:48:00:13:DF:D7:73:7B:9B:A4:E3:3D:4F:E1:43
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019D38D386754724A52F6809A87FCA3DA1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 075B
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: 5bUQlcCKKgKGTuK/6+dlAwG6IpTdways8XM9GMgKOzU=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:86:75:47:24:a5:2f:68:09:a8:7f:ca:3d:a1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=9e13549cdcc8480013dfd7737b9ba4e33d4fe143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:2c:66:5c:4d:57:84:78:62:00:f3:5b:a9:
73:fc:8e:0a:ce:bd:ec:df:e7:7a:a2:6b:b8:ac:be:
b2:dd:4e:f4:94:d7:b6:ad:08:42:f0:98:c9:26:a6:
31:64:37:12:b8:08:f2:6b:83:b2:a8:5e:73:f3:a1:
70:65:ab:a8:33:20:a3:cb:ff:7e:f3:83:4e:30:89:
6b:53:e7:15:fb:51:56:52:51:88:ca:22:61:14:7a:
a1:a6:d8:54:e9:19:ae:23:87:aa:00:69:5b:ee:7c:
23:36:30:7d:bf:91:94:10:86:d7:05:40:fd:7c:ee:
03:73:34:9a:45:a2:f0:45:6e:55:d6:88:53:ee:15:
38:26:a6:22:73:f5:b2:e0:1e:62:e3:59:14:27:a3:
1a:12:1b:21:c7:29:0a:87:07:d1:9b:cd:3b:c6:4b:
51:14:3a:14:a0:a9:a2:8c:19:75:fe:31:0e:ae:ce:
1f:17:8a:22:ae:01:b2:a4:20:72:00:7e:e1:92:ac:
96:8e:52:e2:85:e5:68:8b:91:95:34:e3:b5:ba:59:
e7:99:91:9f:c8:45:1f:e0:52:08:b0:04:bb:97:e1:
a3:01:e7:67:d8:00:ef:71:27:9e:63:a9:c1:c0:a9:
23:d4:5e:73:51:fa:ac:ab:1d:6e:a3:b3:ff:35:ac:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:54:9C:DC:C8:48:00:13:DF:D7:73:7B:9B:A4:E3:3D:4F:E1:43
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:95:2d:6b:2e:7b:da:e4:5b:71:81:15:c2:2d:4c:4b:a4:74:
44:02:13:48:63:e6:9f:21:9b:ff:f5:05:94:14:42:dc:04:43:
71:7a:fd:d1:01:1f:45:bf:9d:d9:85:72:f9:8a:53:1a:0c:2d:
ab:d3:51:ef:25:8c:6d:5c:be:ec:4b:61:4a:20:1b:be:94:23:
eb:4e:38:28:6f:42:c5:e3:3f:52:25:d2:0a:9a:f0:c9:e3:ff:
a1:99:95:aa:c2:0e:d6:8e:56:8f:dc:d5:31:21:c1:4e:e7:5f:
5c:61:4b:5b:dc:0f:51:02:5d:a7:3d:1e:7a:73:93:38:98:13:
00:f6:5a:bc:d1:ee:b1:2d:52:15:d8:15:59:1c:6d:88:b7:3a:
2c:15:00:09:e7:fb:c9:47:e1:70:6a:e1:7f:0a:9e:1a:1a:7c:
56:af:23:3a:67:9a:ac:a8:ff:f0:87:d7:32:f0:74:82:12:ba:
5e:f7:26:72:1f:8a:53:9a:e2:2a:57:c5:bd:6f:9c:e3:cc:29:
d6:99:19:4a:69:47:dd:d2:12:b8:e5:fc:ef:0d:2b:39:6d:94:
88:f6:8f:da:ec:97:0e:4b:6c:b3:93:01:e4:a0:d1:ca:ea:53:
9f:19:a5:4f:30:14:4d:d0:4a:5a:8a:4b:03:bd:6b:82:54:1f:
7b:77:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:45 2026 by rpki-client