Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: l7U29JBrIdKNTXPsD8WGq8lFH7AcwzVleEkAskga6i0=
Subject key identifier: C1:25:AA:AE:3B:07:4C:07:C3:B1:C1:7F:01:23:71:7F:12:A5:EF:D1
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019D382E335FD653FD9F1866A3206648A502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 1518
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: LFJd5kE+hDiGZSppjAy/N7qp8VbFb8h1kDO1L9hcomY=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:33:5f:d6:53:fd:9f:18:66:a3:20:66:48:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=c125aaae3b074c07c3b1c17f0123717f12a5efd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:d0:b4:81:74:e1:75:9c:cd:45:3d:c0:04:
21:39:ee:a1:ea:6b:94:65:3c:29:fa:5f:12:08:4e:
81:6c:ab:c9:63:2a:23:f1:36:23:f4:33:3a:62:be:
c7:b3:3c:7e:ab:4c:20:36:14:55:4c:e6:0a:0f:bb:
7f:16:4d:f5:dc:21:48:ff:b7:2e:07:4b:49:d1:32:
93:5b:7d:02:c1:fe:88:36:06:e7:94:d4:13:ed:bb:
0e:e3:0f:dd:85:ee:fe:dd:91:db:4e:e9:82:79:5e:
80:81:17:5c:22:3a:9c:24:e7:9a:fb:80:b8:29:e8:
8e:32:e8:dd:b0:00:9d:e5:f9:d8:3e:45:42:85:e6:
5c:12:c7:97:fe:6b:01:e5:80:b1:08:ef:85:6a:d6:
6c:1a:92:8c:6d:b5:f6:32:c4:bd:e9:67:bf:ed:1d:
47:ee:fa:22:01:de:58:09:5b:c3:09:4d:c6:28:12:
5c:e2:66:c9:39:4a:ea:8f:bf:3b:82:a1:e2:76:96:
29:f6:80:ca:12:f1:0e:64:b3:90:5a:1e:f1:9e:aa:
d5:6f:d3:52:4f:56:f4:b0:2a:b3:a3:d1:1e:06:cc:
7c:97:9a:b7:0e:d5:72:7d:a5:1b:db:13:01:49:09:
5b:67:bb:c0:d6:b6:3a:aa:d1:18:f9:05:d2:00:d8:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:AA:AE:3B:07:4C:07:C3:B1:C1:7F:01:23:71:7F:12:A5:EF:D1
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a4:d6:58:81:68:9a:9a:8f:ac:a9:f2:c4:48:97:8b:9c:88:
f7:60:4f:69:80:05:07:38:a2:a6:83:44:e3:47:bf:98:09:56:
66:df:10:4c:4c:da:ce:ac:95:1e:11:3d:28:8d:d8:c9:71:f4:
ab:af:c8:2a:70:d8:51:3d:3d:73:22:e0:eb:81:39:a0:e7:98:
ef:f0:dc:60:60:e0:a1:d9:a3:96:53:3c:76:cc:f5:dc:59:48:
81:2d:1c:81:c1:4a:ca:13:a1:93:6a:60:3a:35:94:46:57:8e:
d3:49:71:63:e6:f9:90:3c:6c:df:04:86:93:d0:c6:39:70:ad:
85:9f:67:0e:1b:9d:74:3e:b0:d2:1d:32:8f:f0:c1:1e:71:b1:
c7:a1:18:02:1c:f5:8c:98:d3:7f:14:74:d8:0d:a8:63:67:3b:
67:30:06:50:cc:3f:d5:bc:ac:e5:b3:d5:41:20:de:e0:46:07:
b3:6c:24:f2:b9:43:96:87:e5:25:3b:0f:4f:a9:80:cc:34:88:
c1:cd:0e:ab:ab:0b:64:40:38:58:48:0e:8f:d1:2d:6a:5b:68:
02:0c:ba:a5:2d:43:4e:74:87:c3:a0:09:14:a9:4d:ff:f5:b3:
5c:33:fb:a3:d8:93:c5:ff:c5:2c:3e:42:59:ee:6f:4d:9a:2f:
70:16:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:57 2026 by rpki-client