Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: OlJe3qRkgEbWLaYgrQIxU+VGnnkXjk9vsdGclxWzlvw=
Subject key identifier: 38:C3:98:ED:FF:B5:2D:A8:FD:9B:4F:3F:ED:43:40:3A:29:AA:70:B3
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 019D3752AF49BE6CAED8E8CFEE07A6244831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 09CA
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: DBvLAn0kNvYn7tWN459hVmUP3mZ5f7UiQRpX+Qvl4NI=)
2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:af:49:be:6c:ae:d8:e8:cf:ee:07:a6:24:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=38c398edffb52da8fd9b4f3fed43403a29aa70b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:f6:fd:af:3e:32:08:df:d2:90:04:77:6a:
38:3b:bc:3f:c2:5a:54:f9:2b:7c:b6:ba:87:39:36:
81:2c:d5:93:f6:b5:3a:02:19:cd:8e:04:7f:cd:cf:
47:a5:69:d9:d9:02:ee:1a:e6:6c:20:9c:14:cd:43:
aa:bd:e6:7f:e2:b8:3f:5f:f7:fa:2f:2a:c5:5a:6b:
94:8d:f2:51:5a:26:f5:39:89:60:cb:cc:6a:12:3b:
1b:09:03:a6:1a:36:1d:d5:30:46:df:5c:1f:9c:6e:
09:95:aa:aa:1e:6c:9f:af:6f:41:c6:4b:c0:8e:fe:
47:8f:71:18:31:df:21:7c:c7:e9:07:b3:18:62:4f:
1e:2c:d1:ea:53:48:ab:d2:ac:a7:c5:8d:1d:68:47:
cb:00:01:04:32:f4:4f:1c:49:aa:49:5f:78:3e:12:
c3:b7:06:2d:10:81:11:cc:08:1e:0c:14:b7:03:4c:
9b:da:03:b5:a5:be:59:32:3b:27:84:ad:eb:f0:eb:
3d:47:a9:93:11:a1:55:58:05:32:ff:15:00:c8:1d:
7f:b9:04:5d:54:8e:36:d9:4c:e5:69:10:62:ef:59:
b0:42:5e:42:72:99:94:f8:a5:ac:e6:9a:3b:fc:ac:
b0:05:4f:6f:d6:38:d3:7c:95:40:e7:71:61:c2:f2:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:98:ED:FF:B5:2D:A8:FD:9B:4F:3F:ED:43:40:3A:29:AA:70:B3
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9f:a7:b5:b2:f7:7e:ab:7b:e8:f0:f0:3f:b9:2a:09:11:cf:
f4:c7:09:e2:e5:ca:a8:21:b7:b9:c5:d4:3a:81:33:c4:ee:6c:
af:ea:8f:67:46:e6:8b:01:0a:eb:f1:73:26:f0:20:c8:a3:4e:
17:b5:f6:17:56:b2:e7:18:d3:2e:7b:28:98:f2:41:3e:b3:bc:
90:a9:25:7b:f2:a2:47:f4:2a:98:a4:19:58:a3:ea:be:9c:40:
c6:f9:5f:97:2b:92:ca:c4:a9:f2:34:6f:55:5e:b8:e5:72:b6:
e1:32:38:46:0c:3d:c1:ed:01:e4:59:e7:6a:38:9d:00:2f:5e:
b2:fe:af:7b:80:30:ae:87:0a:12:3f:25:7c:6b:89:81:f0:3d:
79:a1:03:d9:1a:ee:7b:bd:87:7a:e7:da:6f:d0:08:96:80:dc:
22:e8:7e:2e:01:d6:ed:e2:5f:7e:c4:da:84:d0:77:f5:c9:a9:
13:ac:d7:35:ef:42:ea:9c:fe:f0:1e:85:76:78:44:ce:ab:96:
b4:2c:90:eb:5b:67:9a:df:2b:34:bf:1f:13:14:37:45:9a:6d:
90:8c:5c:ac:a0:41:66:36:00:f3:50:52:d4:ae:2a:8f:f5:1b:
7f:a7:fa:45:35:ba:40:61:c2:79:e4:27:30:54:5b:80:d0:f0:
c3:6d:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:49 2026 by rpki-client