Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: AH3USOxJmxohP0IuR1JoOqwaNRvn1or4+3lA25SUKFo=
Subject key identifier: 3C:9B:35:42:DC:A8:DF:2C:67:34:77:2D:70:85:BE:CE:63:BA:F8:80
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019D37C0BD17AF498AAE27E7571496F125A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 1668
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: FWtLLo2pru/WGiMBhjsrJ0+ZB1To8B7JuzS4zYuqz9M=)
2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bd:17:af:49:8a:ae:27:e7:57:14:96:f1:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=3c9b3542dca8df2c6734772d7085bece63baf880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:84:f3:91:b4:2b:22:05:32:07:33:38:03:
2e:32:da:68:a1:58:51:6b:8e:f5:0b:85:82:7d:42:
c1:21:49:c4:49:11:f0:f0:fe:93:fb:93:a3:04:e1:
ad:97:de:ad:5f:6f:04:9b:44:c2:25:03:f6:c1:25:
28:72:41:c1:90:2b:c6:61:c9:30:70:68:f1:84:00:
de:3b:d0:20:d3:d4:13:99:d7:97:c1:f3:ad:8b:76:
eb:c1:d5:86:63:bf:35:98:24:df:29:96:f5:39:b8:
7d:88:c3:a0:ee:35:23:04:50:ed:25:f5:f1:57:f6:
41:a4:d0:6e:f3:72:11:0f:ef:16:b8:ed:ba:44:bb:
1f:18:a6:84:87:8c:e1:dc:1e:ad:9d:cf:64:ec:fe:
4d:4a:b8:c8:bf:40:92:77:66:fc:7e:cd:39:d4:e5:
3e:6c:2f:03:27:5a:89:a6:9e:5b:af:1c:6e:6c:60:
7c:3e:14:e5:3d:84:b1:41:2a:d8:39:fa:2e:54:cd:
66:4a:ba:4d:c4:00:7b:f9:f5:94:ce:51:68:61:53:
c2:45:c1:ba:12:97:c6:5b:8d:a3:95:75:f8:5d:f0:
3a:a4:4d:3c:67:98:5f:9a:7c:2c:5e:64:f7:d3:91:
7e:5d:0c:a8:3b:07:7b:18:9a:af:c5:d1:a9:35:28:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:35:42:DC:A8:DF:2C:67:34:77:2D:70:85:BE:CE:63:BA:F8:80
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e4:b0:12:5c:7f:7d:17:d5:5a:25:a2:61:ec:bc:ec:ed:bc:
50:07:e1:7f:bb:9b:95:a8:38:35:eb:12:03:ea:bd:b8:0e:c6:
e3:dd:f8:06:37:f2:2e:fc:01:e3:43:f3:e5:0e:87:a9:df:3c:
dd:7e:a7:0e:6e:d7:1c:01:1a:d5:22:cf:5d:5b:af:23:09:db:
15:b0:00:7b:a8:a8:a8:ea:a3:08:6f:27:3b:e8:6f:4f:73:f4:
4e:65:a9:56:5e:26:d6:66:6d:a0:51:ab:59:0c:13:ad:63:4f:
dd:3b:2e:fe:f6:6a:50:ad:66:e6:c9:3c:fd:13:02:a8:1f:f6:
f4:77:12:ec:6a:3d:6e:b6:80:e0:4a:7d:ed:41:2a:f0:92:43:
63:f7:a9:a9:8f:5d:9b:a8:b4:51:6f:bc:76:e4:9f:b5:38:86:
d1:0c:d1:ef:1a:b8:76:34:3d:89:99:52:0e:03:65:bb:39:36:
10:bd:ef:c6:57:06:59:40:2e:da:ef:b0:38:9b:71:56:30:09:
78:ab:d9:8a:b4:84:49:4b:7c:4c:f4:71:6b:fc:a1:75:95:62:
13:9c:86:9d:dc:62:24:5b:ca:47:d9:9c:fc:ec:cb:c7:20:87:
c5:63:15:00:95:fb:92:70:ab:fd:5c:ff:23:00:9c:9f:b6:fd:
bd:6d:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client