Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: jGKdiITxAUsPbS1psTikfg5MXgCk0Bd3VJPo6GrLBMo=
Subject key identifier: E0:D5:57:90:E2:F8:3D:D5:70:E2:FB:6D:0B:CA:84:7F:50:73:DE:44
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019CBE4D56E4A010ECEBB1266A5CF05A40D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 013D
Signing time: Thu 05 Mar 2026 14:01:05 +0000
Manifest this update: Thu 05 Mar 2026 14:01:05 +0000
Manifest next update: Fri 06 Mar 2026 14:01:05 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: KeSY55sE8CcO91hpC1WD4d7VpTLYkaO9yxT+HwW2DPg=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:4d:56:e4:a0:10:ec:eb:b1:26:6a:5c:f0:5a:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Mar 5 14:01:05 2026 GMT
Not After : Mar 6 14:01:05 2026 GMT
Subject: CN=e0d55790e2f83dd570e2fb6d0bca847f5073de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:5c:54:4f:cb:ee:e4:ef:5e:b9:2b:9e:7f:
b0:0a:aa:f1:93:d2:9f:d2:b2:e5:bb:ff:e7:d1:d6:
ce:87:52:91:6c:22:95:eb:42:17:2a:ba:37:8e:2b:
e6:7b:89:53:fa:4a:dd:e2:cd:76:e6:99:39:f3:e6:
12:b4:92:10:11:b4:49:a7:8c:b3:34:a6:34:d4:38:
d0:7c:02:af:35:47:31:92:e8:27:b1:27:18:4f:86:
c5:a6:22:d6:6e:3d:1c:a1:65:dc:4e:04:9c:ec:7f:
fb:c7:7c:94:9b:da:09:14:59:44:b2:49:92:45:62:
a9:cf:c1:30:5d:27:16:a9:8c:0c:f3:30:87:54:b5:
54:cf:57:8a:d7:5e:83:46:8b:42:93:5e:11:fd:ac:
e9:43:0f:9c:96:fd:71:39:46:73:bb:0e:a7:3b:e9:
68:39:54:d3:61:74:47:c7:2c:2b:3d:34:d0:b1:fd:
65:c2:83:c4:95:2c:67:ad:b8:f0:5a:1b:69:c3:7a:
8b:75:28:7a:e9:37:aa:8f:93:9a:75:a2:e7:5f:b2:
dc:ba:8e:d7:b6:8b:77:a2:39:c9:eb:d4:0e:62:da:
e8:90:21:b4:0a:4c:bb:ce:da:dd:26:5e:aa:68:78:
23:21:2f:d9:c9:e7:3a:e7:86:55:dc:14:d4:54:e9:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:57:90:E2:F8:3D:D5:70:E2:FB:6D:0B:CA:84:7F:50:73:DE:44
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f1:6f:91:78:3a:24:27:b1:9c:27:3e:04:7c:d1:c4:89:50:
ab:76:6f:ce:17:9e:2e:fb:68:71:fc:05:e7:29:0a:d1:67:d6:
ba:c1:53:ad:d3:4e:5d:3b:84:5c:9f:d1:91:fe:46:c5:5a:26:
0e:d9:5d:fc:e9:97:ed:42:12:27:da:3f:d5:7b:ff:64:4a:39:
81:0c:f8:a7:dc:ce:0f:6c:53:99:c8:7e:16:6c:db:39:52:52:
b8:7a:2d:3f:94:22:76:fa:d9:95:07:ea:e8:c4:58:07:4f:a1:
6b:f2:92:0b:d8:e5:03:0f:4e:c7:1e:1a:09:74:1d:e5:81:45:
ea:ed:e9:a9:63:16:c9:11:c6:e5:a4:39:e6:97:49:c8:a3:9a:
95:63:3a:79:75:20:48:63:bb:21:18:41:2c:cc:9d:8f:c3:59:
23:b5:0c:46:d1:a3:e7:2c:31:31:29:2e:8a:d3:2a:e6:32:8d:
e5:11:6f:18:e3:67:4e:e4:50:de:9e:ce:e7:ff:7e:ea:90:2d:
d9:b7:ed:35:78:3b:42:ce:14:ea:31:39:11:6d:3e:fc:36:b7:
c6:5d:4a:bc:fc:65:9c:51:77:7d:f1:38:5a:37:fa:12:1e:82:
1b:aa:05:39:5e:84:51:b2:ba:51:43:b7:10:0c:7e:66:99:44:
a6:3a:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:46:28 2026 by rpki-client