Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: EVNt48q1SvgdpHbj5K604YF/63c7Xb1nvAJR626RMIQ=
Subject key identifier: 96:C6:E8:29:DC:33:A6:62:23:B7:AB:74:A4:49:D4:4A:B8:03:ED:A6
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019D38D319CAF9427E3798351715FD21C070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0FCB
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: cIK12Os1SbEUXpe0pcIdAKsSj1gZXEMbaPcEOGxLG1E=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:ca:f9:42:7e:37:98:35:17:15:fd:21:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=96c6e829dc33a66223b7ab74a449d44ab803eda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:2b:8e:40:ba:36:81:5a:60:84:c3:56:10:
8d:8f:8e:40:bf:0d:d0:14:7e:00:3f:df:3f:1e:5c:
7e:ea:ce:ac:ec:f8:e4:1b:f9:24:7b:9c:87:0f:ff:
79:bd:47:f7:fc:84:12:e2:9e:70:58:e9:66:ae:93:
a5:1c:aa:27:c3:9d:09:8f:a5:ee:00:85:70:df:90:
a4:a8:b4:e6:5e:90:cd:1f:2c:49:8d:c1:42:0c:c8:
7d:a9:e1:73:69:dc:c9:54:dc:34:f3:1d:45:f9:51:
3f:08:97:8a:7d:52:46:d8:fc:df:22:d7:0f:16:90:
51:9a:e4:b2:02:42:c7:1e:cf:ac:5a:16:b6:0e:dd:
b2:9e:d8:31:cb:f7:49:03:ef:6a:b8:05:d5:32:ea:
57:92:09:34:6c:a3:e7:d5:e7:d3:db:ec:d1:dc:95:
2f:0c:4c:37:d0:53:1b:2e:63:03:4f:33:59:f4:35:
d1:ab:35:1b:3f:2f:f7:4b:3b:b0:79:c3:d7:da:51:
ad:1e:e8:85:f3:3c:79:74:fe:4f:be:94:ea:7a:87:
c4:bf:83:7e:d0:2f:7c:e5:66:a8:94:d9:79:04:30:
cf:8f:fa:08:87:f7:92:ba:56:bf:9d:36:a6:a1:19:
13:16:b7:d9:26:09:93:eb:c1:29:c2:51:a3:0f:38:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:E8:29:DC:33:A6:62:23:B7:AB:74:A4:49:D4:4A:B8:03:ED:A6
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:7c:fc:cb:a4:23:0b:9e:1b:eb:7f:db:5f:12:49:37:4a:
ba:9d:9e:22:ee:9b:73:93:29:b5:1d:e3:15:ed:ce:56:60:48:
d3:a5:05:21:d1:f5:3f:dc:71:ca:d7:79:f4:26:fb:36:7b:f9:
b8:26:13:7b:07:2c:6d:89:35:4b:c8:9e:5c:4d:92:9f:22:76:
56:14:ae:33:cb:c3:02:ff:d2:07:67:aa:cb:5e:f8:82:5f:6d:
a2:de:45:0d:fb:60:bb:af:cc:be:e5:cf:ec:4c:17:ad:0b:c4:
0a:b5:a6:15:ef:06:f3:2a:64:85:76:06:d3:b2:08:d5:dc:cd:
02:5e:a8:56:df:b4:f4:34:73:d6:16:2c:f2:2d:3a:dd:8a:c1:
2f:a0:f4:85:69:f7:0b:bc:1d:4d:9d:5a:23:6c:0b:5c:fe:c6:
64:6c:7c:ea:0e:42:52:0e:10:05:d0:68:e2:25:ea:81:2c:ef:
d5:fc:ac:26:1b:20:d5:d2:f4:94:8c:2a:ab:cd:4a:92:26:94:
86:95:c3:0c:02:f8:3c:17:a9:2d:4b:75:58:50:09:8f:8c:2a:
e5:d9:47:78:05:bf:81:1e:e6:d7:08:78:fa:12:0e:3f:d6:26:
5a:92:28:ef:a5:68:57:ba:1c:62:13:6b:89:80:5f:97:96:28:
c2:a6:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:11 2026 by rpki-client