Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File: 9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier: pco0lgKDPhC2a2YoeOraQKQ4Q/G8TrMtQehL2xm7gEc=
Subject key identifier: 78:3F:A7:DB:69:0C:96:99:86:8D:5B:ED:54:9A:A7:5D:DA:40:F8:CA
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer: /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial: 019D38660A0560EADD675132B7269118A701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number: C3
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: LrzK7EY5vX5YDFH0rRLp6bLvYWSItgYzdzVNgH2op7w=)
2: tVu7BYqzK7HHJE7VWOqHniuV0eI.roa (hash: +vdMw+WbTVZEHF+kPAmVUh0yHJxwjTgxs7NEPk4U6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0a:05:60:ea:dd:67:51:32:b7:26:91:18:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=783fa7db690c9699868d5bed549aa75dda40f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:0e:f1:f9:3c:65:48:bc:c2:0b:37:72:06:
65:27:bb:0f:de:6a:85:fd:0f:03:fd:5a:6b:40:09:
38:21:cc:57:f3:b6:36:92:d0:a4:ec:c5:43:a0:73:
37:b2:11:4d:66:80:82:e1:d5:43:e6:8c:66:5e:03:
e4:8f:b5:0f:0a:9a:ee:60:e4:86:02:e8:7a:d8:6e:
a9:5f:da:02:37:64:77:97:6d:29:76:9a:d8:7b:d6:
10:79:88:48:57:a4:7d:c4:55:c7:90:59:00:4a:ec:
23:93:b9:7e:22:d4:fc:54:76:c4:d5:2a:ff:1b:ee:
92:d4:a2:c1:26:4d:1d:b7:5d:d1:6b:74:11:d9:d1:
fb:4b:d5:86:31:ad:b3:db:8c:c5:0d:6c:38:bb:61:
ad:21:2b:5a:a7:ac:d3:fe:50:eb:fd:7c:37:38:d9:
58:ef:57:52:0f:43:d1:bd:b3:ac:5b:bf:ee:43:89:
6c:e9:f5:0b:8a:96:f3:a0:15:6d:35:54:9f:f9:5f:
68:bc:d0:cf:7b:07:4d:53:1b:eb:55:e8:09:4b:70:
84:3d:52:7a:e8:0d:70:16:59:4e:a7:32:f8:27:a8:
a8:a8:01:81:8a:ab:ff:ef:9e:9b:f8:17:39:2f:60:
84:04:7b:fd:38:1a:40:0a:86:9e:78:a0:98:d3:78:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:A7:DB:69:0C:96:99:86:8D:5B:ED:54:9A:A7:5D:DA:40:F8:CA
X509v3 Authority Key Identifier:
keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:5b:90:b3:68:e8:fd:b4:95:c4:1e:08:8f:3d:6a:c7:d5:
18:f4:1c:3d:89:1d:1d:a8:c3:c4:b9:95:91:14:25:4e:7e:d1:
af:ef:d7:2b:40:a8:e8:b6:79:83:9a:34:51:26:ef:a6:f5:05:
6d:3a:9f:d1:50:9f:6e:e5:7b:71:0f:52:81:cc:7e:cb:40:b2:
fe:d9:f4:0f:51:b7:05:91:ee:25:4d:80:05:69:9b:1f:ae:a3:
61:65:e3:45:95:44:0f:bd:bd:be:3c:72:e1:1b:ff:58:eb:ad:
04:8e:51:b7:7d:7e:20:22:f1:12:3c:84:2a:b1:bc:25:cf:04:
08:20:55:57:7b:c6:d4:bd:73:d3:37:7d:7f:eb:78:8d:78:f6:
ca:31:e6:6f:50:d0:79:2d:79:e4:3d:cc:6f:e6:e0:78:3f:d3:
83:89:0b:af:b8:8f:3d:8c:1b:85:bb:8e:c5:e9:f0:a8:6b:e4:
2b:24:da:73:a4:9f:e4:c6:a9:1c:d5:a3:d1:6a:d0:64:ab:0f:
f7:7b:01:9a:91:04:b0:5e:38:fe:9d:5e:88:54:be:c4:51:00:
6c:0f:54:d2:c6:02:e7:c4:4d:f5:21:be:e1:9a:bc:a6:df:b8:
03:fa:1a:b1:0a:b0:d1:a8:44:e6:c8:0d:f4:29:bb:da:0e:7d:
16:75:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:36 2026 by rpki-client