Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: mCDRe0tTZPejNiAFzoEqY8W+d71zgFvyjPJVfLENGGY=
Subject key identifier: 14:F1:6B:35:8A:6D:F2:9C:DC:4B:F2:C0:A0:7B:31:32:34:BD:93:87
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 019D382E28E12AED396C4312A1281AB121B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: 6nUoMGhom0d9XV3Ph/j2e+tu6C7AsuY1x4YSBU7oSc0=)
2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:28:e1:2a:ed:39:6c:43:12:a1:28:1a:b1:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=14f16b358a6df29cdc4bf2c0a07b313234bd9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:b9:5e:23:7e:54:99:10:08:6d:6d:e7:69:
fe:05:8b:d3:bd:2e:54:63:70:e5:a2:7f:e3:be:6b:
ee:e6:ba:a7:f1:91:a3:12:d6:a2:d5:c2:f7:06:57:
18:59:72:e1:a3:07:7f:3f:fb:d5:d1:f2:c0:88:fa:
dc:c9:e5:a0:a7:b9:d1:c0:2f:01:58:14:e4:e4:98:
b0:df:83:d1:35:e6:a9:ba:39:d3:67:61:86:cd:b6:
69:8a:09:ee:8a:7c:74:9c:1f:c3:b2:06:59:f5:b6:
66:54:a6:28:2f:aa:68:10:76:38:8a:ca:40:eb:43:
e9:d5:e7:7b:4f:6a:ec:5b:a3:e6:c0:93:83:c7:2f:
7b:74:0c:42:be:c5:84:82:21:45:d2:ba:46:79:56:
19:4e:8d:11:9a:c1:dc:bb:94:df:3f:2e:2f:34:e0:
c8:93:83:c5:3a:75:b1:85:11:de:cc:c9:88:9e:47:
42:d7:34:af:c4:d7:90:63:05:dc:7e:77:31:22:48:
d1:69:80:fa:70:ed:b9:b6:39:a9:ff:9a:9e:76:c5:
0a:04:61:7c:0d:a7:1f:e7:fd:06:60:47:d7:30:a0:
8c:6a:42:06:a1:a9:b7:9e:93:4d:00:70:ef:a6:f5:
a0:8d:41:71:3b:04:52:b6:c9:a2:1d:7d:5e:92:9a:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:6B:35:8A:6D:F2:9C:DC:4B:F2:C0:A0:7B:31:32:34:BD:93:87
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9a:5c:31:73:1b:93:79:91:89:90:07:d3:3a:ea:1e:21:7e:
53:13:da:84:a6:b3:3f:ae:b9:59:59:de:a6:04:2e:36:e9:0b:
36:9d:c6:97:fd:ba:68:f8:cd:1c:c2:54:b2:58:e2:72:1b:a9:
3d:74:af:21:18:bd:45:d0:5e:f0:54:2d:9e:0c:c6:18:19:bd:
14:30:8c:44:39:f7:38:0c:c9:95:4c:19:bc:df:22:83:db:93:
2d:b9:f1:b8:2f:eb:b4:a7:c0:c4:b1:84:37:9b:7c:1a:28:e3:
9d:3d:c8:17:f9:61:ab:cb:d2:cb:1f:d9:24:2e:11:2c:00:c1:
64:22:e9:69:f4:b7:f1:7a:89:49:7e:50:32:8b:a1:69:7e:eb:
fc:a6:13:87:d0:fc:cc:01:84:8e:54:79:a3:94:05:78:c4:37:
46:e1:71:52:9c:ce:a5:8c:59:87:88:f8:de:7d:23:ad:66:ac:
58:00:20:90:e6:8e:f3:44:6e:d0:b5:8e:33:69:69:0c:43:84:
f9:09:bd:e2:12:dc:88:cb:41:a8:93:20:32:f6:d1:02:be:af:
fb:a4:d4:f7:0e:40:2b:a4:a8:69:ef:e6:7d:8e:7b:fb:57:3a:
65:f4:28:84:d0:90:31:25:9e:55:ce:a1:d3:71:74:df:64:59:
da:52:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client