Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: HN3T/MLnzvkkBj/a8Y1kbN6x4AkH5NbDmB+GYzhJiJ8=
Subject key identifier: 7B:CE:CA:B9:44:18:2C:AD:EC:71:1E:93:3D:9E:A1:56:0A:BE:F7:C7
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019D37F766F9FDFD7D951FDBCB0DD6D7A3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 17D0
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: GtjasQpM7ABSgsEzDlBGOOEymcseQau92bzvuABSMY4=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:66:f9:fd:fd:7d:95:1f:db:cb:0d:d6:d7:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=7bcecab944182cadec711e933d9ea1560abef7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:35:6b:9c:d3:8b:b4:c1:81:12:d9:df:ac:
4e:5e:5d:f7:23:17:66:13:0a:51:27:a2:1e:2a:9a:
ca:65:9a:1b:0d:ce:a8:09:4e:fd:34:dc:db:e8:2d:
57:24:43:19:34:3a:53:36:d0:0e:11:ab:91:94:b9:
5a:7a:ba:c9:97:e7:ba:d8:3b:3f:68:20:83:88:bb:
21:a6:22:f1:16:b2:ab:7e:cb:7c:7e:3a:f8:9f:0a:
be:5b:48:37:2a:a2:c0:2e:10:49:f3:6b:6e:7f:9a:
2d:2c:38:50:b9:bb:1a:92:a0:72:0c:e3:d2:97:00:
22:d5:64:23:72:2c:23:f9:e9:94:90:6c:d8:df:34:
e7:59:e2:2e:2b:02:5b:58:85:45:cc:93:d9:cf:78:
b5:88:5d:3d:16:e6:d5:d8:e4:2d:4b:37:98:e2:4d:
ff:fb:3a:8d:bc:19:12:38:ff:fb:1b:16:ea:68:9a:
fb:dc:f8:e7:1d:37:be:35:b0:6b:45:ae:8b:ce:13:
13:d0:a8:ad:80:4d:9e:b7:70:ba:75:08:5d:78:3c:
4a:f0:9e:dc:be:ba:ce:04:1f:7f:5d:ab:5d:87:bf:
fe:9d:c7:32:41:19:b0:d6:82:7d:b8:19:02:ca:e1:
f7:cb:36:bb:ee:71:3f:85:e3:15:2f:6f:d0:47:60:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:CA:B9:44:18:2C:AD:EC:71:1E:93:3D:9E:A1:56:0A:BE:F7:C7
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:cd:0d:fe:f2:e1:d1:fc:65:9f:a4:6d:36:25:6d:c6:14:
0b:c9:29:44:c0:5d:64:8a:33:ee:7d:9f:78:77:b6:7e:57:c4:
ba:e9:cc:f4:6d:6c:ec:58:d7:dc:4e:9f:62:10:ee:88:1c:87:
89:f5:02:9a:05:a2:be:3f:25:eb:ad:12:e8:3f:8b:5d:eb:a5:
8d:05:8f:b9:c5:5d:9f:fa:cf:c2:58:68:2c:58:8d:9b:fb:c2:
0f:e6:5d:ff:21:64:3a:8c:43:55:77:98:81:fb:57:13:cc:68:
3b:56:3a:3a:c6:62:56:97:be:ea:5b:ab:84:c9:f3:f5:e6:8c:
ae:f9:e3:74:65:cf:b1:17:5a:f6:25:9e:23:f9:a7:6c:f3:4b:
81:9a:91:bc:fc:58:19:84:19:10:1c:5e:79:1a:61:88:f2:a3:
84:40:92:11:f2:c2:2b:8d:80:28:a0:89:46:ab:17:f7:e9:8e:
d7:35:ee:01:d7:80:46:e7:14:1b:69:0d:10:2d:59:83:48:c2:
bb:f8:1b:5d:72:8f:60:a2:71:5d:b0:d8:8f:e2:0c:dd:d3:64:
fe:6c:2d:b9:ca:28:df:7a:6d:dd:b9:51:4f:2d:75:58:8d:d6:
5a:97:53:0e:9c:3c:76:b8:95:85:ff:b8:e6:52:73:89:fb:96:
a2:86:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:37 2026 by rpki-client