Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: loG+wEI1g8D9DEvJjnekaO/JPZRMluK50MPdGhEqesU=
Subject key identifier: 2D:A7:1C:AF:60:48:BB:0B:92:2F:34:1E:41:61:69:6D:B6:D2:16:4A
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019D3941BEF156C6B4A77DC6FEFC69AD837C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:01:43 +0000
Manifest this update: Sun 29 Mar 2026 11:01:43 +0000
Manifest next update: Mon 30 Mar 2026 11:01:43 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: OovsF+O6HNmmN6rCHrnSLB1vosmKWCx5HnSh6fqJt90=)
2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:be:f1:56:c6:b4:a7:7d:c6:fe:fc:69:ad:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Mar 29 11:01:43 2026 GMT
Not After : Mar 30 11:01:43 2026 GMT
Subject: CN=2da71caf6048bb0b922f341e4161696db6d2164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:da:1a:6b:6e:87:66:e1:3d:38:28:c3:18:
9c:06:79:fc:78:5c:7b:79:9f:8f:a2:cd:ff:82:40:
6f:32:24:1a:be:eb:31:cd:31:17:79:30:11:df:39:
21:5d:ec:be:1b:9a:46:32:0a:8e:8d:ed:76:8f:7e:
7d:80:51:bc:48:b4:da:19:50:fd:8e:c3:60:66:bf:
3c:7b:af:fc:e4:6f:48:d2:f4:78:a9:06:89:72:4a:
df:9c:5c:13:cc:17:5a:eb:91:d4:da:87:0e:49:b7:
b7:2e:68:63:4b:a1:c3:58:13:c7:a8:81:31:8c:36:
3e:2e:d7:90:fd:26:5b:b1:2d:4f:67:18:50:95:24:
54:0f:00:4a:de:f6:c6:80:45:bf:55:4d:55:f7:cd:
af:c5:a0:14:63:37:90:04:de:d8:ac:ca:3e:c8:f6:
5c:dc:d6:21:a6:7c:00:6f:54:32:b0:e7:ed:ee:1c:
4f:4e:3d:e6:62:a1:ee:cd:57:18:de:67:4b:7b:fe:
cb:42:1d:a2:01:a4:a0:0d:4a:69:85:59:49:3b:14:
a1:2c:9f:07:c2:1a:8d:67:43:04:2b:68:c4:0b:56:
5b:f9:13:f3:0c:b3:d9:ab:eb:03:ae:f0:c0:0f:a4:
8b:6e:8e:99:94:4a:e7:5b:bc:17:de:8c:df:5d:0b:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:1C:AF:60:48:BB:0B:92:2F:34:1E:41:61:69:6D:B6:D2:16:4A
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:82:4f:64:bf:7d:af:54:02:f9:d7:62:d4:2e:3f:31:e3:c8:
35:6c:7d:79:38:ac:f1:f5:b6:45:66:27:3e:4d:49:4a:00:3a:
14:5b:88:d1:19:c1:81:08:1f:1c:35:d3:14:cc:14:28:35:ff:
78:9c:77:60:38:fb:f6:d7:7c:d3:51:1a:7a:35:1b:44:82:7d:
99:aa:e1:98:29:9e:e5:b3:38:61:05:e5:9c:50:ec:fc:d7:43:
4c:69:46:0d:9c:22:c3:36:6e:00:9a:44:bb:9e:7d:04:a3:49:
f5:4f:c7:5b:79:cd:62:6f:cf:51:ff:6e:cd:9a:8c:40:06:28:
13:be:85:32:64:f8:bc:95:60:cc:b8:d5:52:70:48:e3:cb:2a:
8e:d2:7f:c2:2e:10:8d:0a:79:fe:2e:4d:d3:48:70:61:1e:2c:
2c:de:aa:04:1d:d8:13:09:a3:ab:df:a3:6e:80:2a:32:c5:d0:
34:7c:e7:d1:41:f1:4b:87:05:d4:1a:d5:4e:6e:a5:4e:eb:3e:
0d:6b:98:e5:a1:dd:19:38:f5:b1:95:6c:cb:0d:f4:a9:ae:1d:
76:5e:77:db:11:0e:e9:97:1b:2f:3c:64:13:5d:78:61:7d:f6:
29:87:68:d1:20:86:98:af:5e:18:9c:0e:f0:84:db:e6:7b:55:
58:32:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:03 2026 by rpki-client