Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: 4d2Ilogv2BWo+1P7QmewRo+Tpl1sNXRRpuMgUhjTgLo=
Subject key identifier: 0E:AA:A7:4E:78:8E:08:60:08:E0:CB:31:B5:C1:28:43:83:E8:CB:32
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019D37BFF82896048968E2C0F193C59F8138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 3E
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: 8G3TVQBvWefQw5NqVHe4IUi6jaPnCyDEQIjJ38ZdvBQ=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f8:28:96:04:89:68:e2:c0:f1:93:c5:9f:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=0eaaa74e788e086008e0cb31b5c1284383e8cb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:ad:2a:3b:27:29:af:44:fa:10:62:95:39:
20:ca:92:17:ce:88:e1:cf:9a:42:f9:59:fc:50:1c:
2f:f7:50:77:5b:ed:dd:25:1b:66:e9:69:a0:91:71:
2d:70:39:be:b5:0a:17:f5:6e:53:05:8b:77:bd:e7:
34:ee:18:ce:0e:e8:7e:3b:b9:1b:36:a4:c7:26:e0:
08:19:57:1d:c6:5b:f2:9e:a3:97:35:6f:62:c5:db:
a2:72:b7:68:d6:2d:d7:60:84:16:75:07:c4:52:cc:
b6:0d:9a:36:37:cd:08:c6:42:3a:ec:f1:f9:a0:f4:
43:3f:b7:d5:2f:91:1b:ff:dd:91:6c:a5:22:1c:30:
56:0d:0b:44:23:44:6d:ef:7f:96:9d:09:f0:ed:23:
fa:c3:5c:49:25:b4:e6:36:ae:be:63:da:d2:68:d5:
f0:29:0b:2d:44:5b:67:86:1b:53:0d:b0:92:01:11:
9e:95:ed:52:e5:05:88:67:2a:32:d4:92:80:27:c7:
e2:89:58:59:0f:4c:ec:3a:be:ac:0f:f7:03:d8:71:
60:25:cf:db:c2:b0:71:8b:62:49:24:e8:2e:8d:c9:
54:85:1f:5d:52:6a:a8:9e:5d:f9:0c:2a:6c:35:d7:
27:14:e9:81:26:ac:8d:67:a9:45:02:3b:46:9c:24:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AA:A7:4E:78:8E:08:60:08:E0:CB:31:B5:C1:28:43:83:E8:CB:32
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:15:46:c1:2f:72:38:8c:b3:e7:ef:8a:12:ba:65:87:b3:2e:
f9:b0:27:80:1b:56:66:64:7a:5b:43:8c:89:49:1a:27:12:6f:
03:5a:3d:60:a1:ef:ac:34:6e:2a:0c:d4:a4:96:ef:f0:a1:85:
4e:aa:98:d8:2a:9f:67:3c:e3:c6:39:52:39:8c:2a:41:66:d7:
a7:ea:72:1e:df:03:c1:8a:8e:63:21:50:45:f8:24:75:ef:a8:
15:6e:ff:9e:29:52:de:7a:77:64:dc:e6:77:82:5c:e1:44:4b:
cd:be:bb:36:8f:fe:cf:57:dc:30:b8:52:23:0b:f0:2c:9d:ab:
28:54:c2:0d:72:db:fb:c2:aa:e0:70:76:3d:7e:22:b8:37:a3:
de:3d:84:c2:24:2f:76:48:79:cf:b5:92:9f:62:98:9f:89:19:
51:e2:fe:36:d8:1b:25:8d:ae:16:10:05:ea:c8:2f:f4:d7:d3:
86:af:5e:db:c3:a1:17:23:f5:17:e1:fb:66:c7:8d:ca:5b:3a:
5f:a3:2d:62:17:81:e8:e9:a7:65:ea:2c:4d:f1:53:4d:1b:31:
63:01:ad:99:b6:3e:48:a2:19:78:bd:4c:62:3b:e9:3c:dc:1d:
a5:f0:1d:d0:b4:a8:bf:cd:30:04:17:76:1f:f5:15:5a:76:41:
8a:6a:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:19 2026 by rpki-client