Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: icio/ag7wNiUtFDu60Ar/PQLDCNK5shz4fAbxnya0sA=
Subject key identifier: FA:B2:77:CF:2F:E5:AF:44:7F:60:A2:3D:28:F9:1E:2E:9B:6A:AF:81
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 019D39E5F2F391F92034475FB510AEB1B0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 14:01:04 +0000
Manifest this update: Sun 29 Mar 2026 14:01:04 +0000
Manifest next update: Mon 30 Mar 2026 14:01:04 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: Zw2AVlhiOXSKCDhUdMB310eIlzeGSiNs0/KvytkutvE=)
2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f2:f3:91:f9:20:34:47:5f:b5:10:ae:b1:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Mar 29 14:01:04 2026 GMT
Not After : Mar 30 14:01:04 2026 GMT
Subject: CN=fab277cf2fe5af447f60a23d28f91e2e9b6aaf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:ed:de:c6:0e:2d:e9:66:42:fb:77:ff:47:
a3:38:2d:ad:28:60:31:62:b6:ad:09:f5:6a:93:52:
05:23:ec:4c:59:36:9a:0a:24:45:47:a2:24:74:eb:
28:fc:84:24:35:df:90:92:d0:8d:59:ae:ba:47:d6:
a7:2a:69:ab:8e:29:db:7c:84:cf:5a:77:77:85:58:
e1:ae:2b:b5:39:27:29:57:d6:1f:66:9e:b0:a1:de:
41:42:b8:d4:ca:4c:7a:9f:84:80:04:78:69:46:66:
9d:84:ef:05:ae:f7:87:ec:31:85:73:a5:88:9a:2a:
cf:20:36:bf:55:2a:78:08:3a:48:df:78:db:bf:ac:
c4:0f:95:30:db:ca:63:96:46:e8:86:05:4d:e7:d9:
9f:6d:48:b9:27:fe:fc:37:fd:f8:f0:14:0f:7a:f4:
a8:d3:1c:c5:6d:c1:33:a5:d2:8b:58:fc:f1:9d:d0:
f5:b3:8c:2e:e8:7b:69:47:6e:5a:2c:ce:2f:11:ae:
d8:80:d0:27:72:af:6a:fa:26:05:bb:98:b9:3a:43:
f1:4c:ac:af:c3:f6:7f:58:9c:bc:8c:66:4a:df:8d:
55:cb:9f:3c:f8:3f:9c:97:6d:1c:81:96:c7:62:74:
a3:3d:c0:d3:6e:31:0e:e6:ca:01:7b:49:66:46:c3:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:77:CF:2F:E5:AF:44:7F:60:A2:3D:28:F9:1E:2E:9B:6A:AF:81
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:44:74:48:d2:00:61:9e:4e:2e:2b:82:7a:94:ed:77:a0:a6:
4f:57:b5:dc:d6:83:35:63:31:3e:ed:b6:99:e7:99:49:5b:49:
5b:fc:f6:bc:9b:de:35:c5:a9:4d:7f:fd:18:5a:98:1b:71:06:
66:bb:03:3f:8d:be:ba:d5:fd:fa:09:58:1a:fa:0f:b0:70:7b:
d7:ca:f1:2a:df:b9:83:a5:34:68:14:c4:63:b7:b6:89:62:73:
22:1e:0a:99:e2:35:86:38:b3:7a:cc:48:54:75:de:5e:7d:f3:
a2:b8:46:15:b9:0c:bc:95:6d:78:ff:42:e5:6a:79:45:63:60:
bb:0e:1a:cb:b0:57:56:70:96:5e:da:d7:a7:85:d4:38:cf:05:
4a:a5:8d:17:19:b7:50:b6:b3:4d:0e:43:e8:7e:04:7a:bb:02:
3c:3e:3f:2e:07:88:10:4b:d4:3b:64:0f:a9:ad:6d:e1:98:f1:
ca:06:7d:f9:15:32:96:57:18:e8:70:e9:54:4f:87:2a:5b:f3:
07:2e:51:ec:1e:52:6d:be:3b:41:e0:21:dd:b5:e7:41:aa:05:
ea:c1:8b:43:21:7e:90:d7:73:b8:ee:ba:f7:03:b4:40:43:c8:
44:81:fc:df:9f:24:c4:63:73:50:14:21:ee:c7:45:03:58:de:
74:08:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:45 2026 by rpki-client