Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: /sictUg7QR4NPMVDXQ4Evgf+P1qf/NIIVIAiQEzqar8=
Subject key identifier: FA:B6:4A:7A:FF:11:71:02:0B:6E:BB:E1:22:36:C7:54:F6:17:B3:A4
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019D382E07985877AB1595E3223DE85EA912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 099E
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: q5ibp0Pmr4fVyQ6VJhqMR0rb4pFJgqDhFv2Pm2UTF0o=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:07:98:58:77:ab:15:95:e3:22:3d:e8:5e:a9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=fab64a7aff1171020b6ebbe12236c754f617b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:28:70:32:ef:eb:f3:d3:14:e8:2b:45:55:
9a:7d:22:fd:48:ea:75:2d:47:c1:ff:b3:86:9d:97:
11:c6:0b:87:a1:83:06:4f:ab:01:fc:e6:10:be:3c:
15:20:44:8a:62:f0:95:85:e3:49:8c:70:6e:3a:a9:
30:49:30:af:12:b6:fa:55:13:99:f9:76:46:a3:e4:
1c:86:d4:a1:a4:94:42:7c:f3:d0:a3:3d:b1:e6:31:
60:5b:f8:ab:4f:82:98:d3:58:78:60:1f:c4:13:e3:
62:ef:a1:4c:36:2d:be:98:58:85:73:33:62:6b:9b:
4f:c8:39:19:e2:78:79:19:ea:3e:fb:70:7c:e9:81:
c9:1f:f9:47:1d:32:f3:b0:ff:7c:ef:91:fd:64:f2:
50:df:fc:3a:ad:2d:81:fb:b9:0d:88:0f:86:4c:b5:
44:15:18:15:53:a9:4f:68:f5:80:20:e5:a7:d6:ba:
51:48:b3:18:02:96:86:57:5f:a2:51:9c:14:ca:61:
48:49:58:fe:1b:05:85:ef:75:3a:f2:75:09:01:ea:
4e:e9:b7:ae:ad:2b:d6:61:b4:bf:d9:c0:7f:36:6a:
56:22:81:e6:ad:f2:d6:76:cb:af:80:d9:97:59:98:
7d:23:b9:79:d0:dd:85:56:5a:9d:e5:45:e5:83:95:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:4A:7A:FF:11:71:02:0B:6E:BB:E1:22:36:C7:54:F6:17:B3:A4
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cd:5d:67:52:2b:55:a4:e0:76:57:50:63:f4:ea:15:d9:76:
1e:8a:95:08:68:b5:e8:1d:05:0f:44:94:06:4d:8b:9a:03:51:
3d:a5:39:88:af:a1:15:d6:d0:07:14:4d:68:2b:cc:a1:6e:8b:
88:e1:04:73:82:21:43:e2:dc:de:41:04:98:56:8d:ed:b2:0e:
e3:20:41:43:db:fa:9b:26:65:d0:89:7c:11:47:90:87:a1:90:
61:63:04:00:ec:8c:4d:f9:c7:08:c8:0b:7a:39:24:ae:21:ba:
6a:f0:fd:ff:f8:63:25:0c:95:c6:5f:f8:e8:93:95:99:67:44:
2b:35:b0:d7:8a:9e:e5:fe:98:ef:02:5a:c1:0d:71:49:99:1d:
fb:2a:af:73:4b:f6:5c:47:93:09:07:94:59:59:ce:8d:7e:d4:
5b:9d:74:6e:ce:e2:4b:dc:dc:27:a9:78:e2:d5:b9:44:5a:f7:
77:d8:45:2a:b8:2a:a3:b0:17:58:fa:34:f4:ee:fb:7f:ac:d6:
2f:5b:67:2f:e3:95:4d:9c:8f:4d:7b:d3:bd:76:0a:ad:ca:0e:
9d:ea:9a:16:76:a0:99:1c:77:81:69:f2:89:96:6f:3f:c0:54:
7e:b0:80:8d:f8:6d:a2:56:f0:88:1e:f9:0b:59:88:10:4d:c3:
e6:bc:b2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:47 2026 by rpki-client