Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: 9jGIDVM09I+PBpUSfmoZUsjXDK1PsEKproiPwAdC3C0=
Subject key identifier: A2:68:FF:22:D0:EB:33:77:E2:22:2E:9E:77:37:57:47:F7:13:30:D3
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 019D37526AE9A77C654D0BE0FF4291D5FD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: 0330
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: 2PRZ6lFW5Ytchf9MmZf7GwlA3vA.roa (hash: vawlKSVHyKRBL2/hA/FnCEfDpygXxAirjAN/iyp8egI=)
2: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: YGp2U1GVIwob82Fsj5riHQIV/xyoSBQTPvm0QiLUDzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6a:e9:a7:7c:65:4d:0b:e0:ff:42:91:d5:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=a268ff22d0eb3377e2222e9e77375747f71330d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:ab:52:64:7e:dd:3c:52:3a:f0:f5:1d:39:
11:a4:a9:68:37:1f:8e:16:b3:51:13:47:e6:84:7e:
bc:a4:10:9c:80:72:ec:16:9e:9b:56:e6:7d:fb:b7:
b2:bd:bb:61:01:12:79:b6:b6:0b:d3:9c:aa:92:57:
84:bc:62:9c:1f:e3:03:ee:95:39:65:e3:9e:a1:c2:
83:88:45:e5:ad:69:2b:e4:a7:09:6e:e6:26:17:57:
3f:97:cc:6b:9b:6d:6e:97:e2:54:a2:89:9e:6a:31:
1a:b3:83:4f:eb:43:44:87:26:a7:83:be:b6:12:87:
3c:1a:e9:25:2f:54:9e:86:e8:43:16:35:06:44:27:
4f:86:c3:48:5c:a0:67:83:4d:73:e1:1c:75:02:7e:
4d:d1:db:46:2b:4b:b8:63:02:f1:73:b5:b3:a9:47:
10:64:28:6c:ed:36:fb:6c:8c:a5:29:0c:38:c8:40:
e5:ca:58:4e:a9:98:ab:35:20:18:8d:85:a6:bf:fb:
47:5e:2d:07:61:58:49:70:ae:21:4f:22:e5:a4:2a:
5a:50:9f:3e:fb:d7:c6:b3:f4:9f:f6:3b:9a:3d:2c:
2b:7d:e4:a3:44:b5:73:89:c2:c1:6b:19:e4:c1:1c:
7a:34:d1:b7:b5:b5:ea:59:5f:51:1e:d5:e2:f0:da:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:FF:22:D0:EB:33:77:E2:22:2E:9E:77:37:57:47:F7:13:30:D3
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:35:05:9e:bf:b0:a6:fb:46:d1:68:de:a2:68:8b:3a:31:
ed:db:58:67:c3:fd:f3:f2:42:b1:ce:00:db:ee:ab:1a:55:34:
f0:a7:31:78:88:0e:83:a1:46:37:2e:e6:6f:c6:cb:2c:1b:a9:
65:5d:db:9b:7b:26:1a:bb:8c:9f:84:ba:23:be:7e:0a:ba:8b:
2d:c9:26:12:63:1c:23:1d:98:cc:9f:db:cc:3d:4d:fa:2e:c4:
9f:e0:5c:e8:39:23:c3:8c:85:40:40:65:e1:75:51:0e:fa:6a:
e0:2e:bb:7d:ae:ea:29:e4:28:bb:29:e0:b1:a0:4a:4d:aa:94:
93:be:d6:c8:9a:f9:b9:99:d0:62:34:7d:b0:6d:ac:27:56:bd:
b7:91:83:45:b4:3b:0f:a3:c1:68:23:58:9a:3d:4a:5e:df:f4:
68:8b:c0:a6:50:66:b4:ed:56:6f:54:ac:d4:10:f9:dc:92:2e:
0f:40:75:4c:76:50:04:b6:f3:68:9b:a0:99:89:13:66:3b:17:
0a:79:c8:95:3b:54:c0:c6:a6:0b:6c:15:42:3e:15:6e:b0:b3:
cd:53:85:6a:68:4a:e7:67:e9:cd:23:f6:c3:ad:59:2f:8f:4b:
6b:f4:9c:4a:20:31:03:67:5c:bd:a1:29:66:87:2f:74:ca:90:
9e:2d:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:02 2026 by rpki-client