Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: VufWaU1s9Yqt2E9VKf6hpyS7KYuHif6FmObu3kh88Wc=
Subject key identifier: 1F:6A:81:9F:07:96:91:11:BA:82:C0:92:7D:14:EE:73:D6:F3:DB:16
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019D3977C710549C72F874D76393BCCC2388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0989
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: N3D0bYfroV2GeuIeguD5Kd9LPhukO6c7abV/nCxsJRQ=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c7:10:54:9c:72:f8:74:d7:63:93:bc:cc:23:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=1f6a819f07969111ba82c0927d14ee73d6f3db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:e7:87:e0:44:95:3b:71:67:cf:2a:d9:6d:
31:b2:34:ec:49:7d:7a:72:f2:0e:4c:3f:27:8b:db:
11:7b:5a:d5:2e:7a:a5:e6:ba:8a:3a:c3:6a:4c:11:
51:f6:f6:09:ee:bc:8c:2d:aa:c0:4d:28:59:ca:42:
14:8f:a4:37:3c:29:65:2a:bc:7a:cb:38:91:7b:8b:
e1:13:35:8d:11:b6:f2:d8:fa:10:f1:56:3d:fc:2b:
5b:ce:5f:fe:d0:e7:67:b8:cf:08:06:67:c4:79:7d:
9e:ed:ff:33:3c:39:bb:3b:ce:c1:98:84:24:b3:b2:
23:1b:99:0c:02:06:45:93:e2:7f:c9:1a:9d:86:09:
31:d8:a8:eb:bc:76:2c:fa:4c:f0:6d:1d:37:e6:cb:
87:44:6a:6d:d9:0a:5a:ad:11:31:2f:5b:99:70:19:
c5:bc:d3:53:00:99:65:7b:c8:32:b6:eb:c4:66:45:
8d:17:68:bd:4d:a7:da:0b:7d:e9:9d:05:5d:ce:35:
1d:bc:62:02:7c:c3:f6:16:79:1a:e7:fe:02:86:5b:
ff:3e:9f:f4:6a:11:21:40:99:7e:ce:26:90:40:d6:
24:ba:9e:d8:6b:82:ed:39:74:d9:e8:fa:51:c8:ff:
36:63:91:84:a8:39:3f:aa:f3:cf:84:e3:98:56:47:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:81:9F:07:96:91:11:BA:82:C0:92:7D:14:EE:73:D6:F3:DB:16
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:ba:04:15:0f:d0:5a:4a:2f:91:fd:cd:df:94:43:04:a0:
f0:fe:b7:93:0c:8f:8d:d6:8d:c2:ed:d6:95:95:72:e8:c0:35:
a2:d0:6f:33:45:5e:a3:46:e9:57:ef:e5:36:83:1f:5d:7e:c4:
44:32:85:14:41:93:da:45:94:28:ee:ad:ca:c1:bd:b8:57:5e:
66:20:4a:60:a3:aa:23:0f:57:7c:e3:e1:17:32:9a:75:83:b2:
ad:fb:0d:83:64:d7:aa:95:a3:62:4e:4c:ab:e6:33:bf:1b:14:
89:bb:e7:05:88:cc:ab:2b:41:10:00:12:d6:83:e4:75:39:6d:
fc:01:e0:ba:f9:20:c9:1b:3a:6f:97:79:ff:11:64:e8:18:58:
de:ce:84:0d:77:74:57:e1:f3:07:36:31:bc:c3:59:98:85:82:
93:a8:df:b1:7f:fe:b9:d5:f3:e5:60:06:8b:39:f5:dc:86:af:
51:ec:20:ff:dc:a8:d2:a8:cb:5c:eb:85:c2:bf:02:ec:73:72:
f7:9b:ab:40:08:f1:16:60:02:ac:1b:25:19:a2:ad:a9:fa:ec:
51:b6:2c:a7:39:70:dc:14:de:2f:de:71:aa:1e:77:bd:56:5b:
7f:12:40:19:cb:5d:b9:39:ca:90:a7:fc:bc:ab:5f:29:cc:76:
3b:d8:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:38 2026 by rpki-client