Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: wzdeAE2KUo26nRIAWa/mXDt8jeSBcG2IAjptrQGagwU=
Subject key identifier: 5F:23:93:4E:4D:ED:F6:9A:CD:71:4C:D0:B8:55:D5:8F:0F:FD:BF:9F
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019D378987A9D1F159E6360897D60A741009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0E8B
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: GzacQJTPIk5lc7XvDI5zxx/tDEj6O1NnceYjOfC/q8w=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:87:a9:d1:f1:59:e6:36:08:97:d6:0a:74:10:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=5f23934e4dedf69acd714cd0b855d58f0ffdbf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:d7:27:95:28:9b:6f:c7:ef:46:36:7a:81:
36:f0:28:53:c3:f5:94:47:6e:dc:86:58:53:5c:af:
2d:ff:04:3c:49:61:a0:3f:f3:e1:be:ef:94:86:18:
2a:1a:f8:be:9a:52:d0:57:ea:6d:8b:fb:91:0c:51:
b7:21:ab:7f:2e:cd:84:bf:7f:01:10:b5:cc:c5:7b:
51:68:b2:15:af:fb:50:59:72:c4:3c:07:8d:7c:95:
9a:f0:8e:71:58:c9:13:18:2a:51:16:4a:25:89:87:
63:45:26:71:71:b7:62:84:de:d9:85:a2:96:74:b2:
29:bb:b9:e6:65:31:5d:cf:a7:7e:90:10:ed:44:b3:
69:1c:b1:2d:84:a0:25:b5:ca:71:3c:50:96:dc:12:
fc:2b:67:d6:a5:19:40:ed:0e:23:c5:7f:bc:fb:04:
04:14:ea:fa:74:24:0e:3e:4b:63:60:1f:e5:a5:2c:
a9:cc:98:f0:75:c2:c7:60:c5:53:2d:12:c0:26:54:
5b:6f:48:6e:12:54:cf:1d:b2:c0:ce:ef:b4:b1:b1:
a1:48:55:13:16:04:18:1d:79:35:95:44:a2:db:1a:
80:af:d1:83:cf:a8:f3:ff:09:4b:fa:51:8b:81:f0:
16:27:ca:ec:57:6c:db:23:ba:3b:f6:ea:78:be:95:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:93:4E:4D:ED:F6:9A:CD:71:4C:D0:B8:55:D5:8F:0F:FD:BF:9F
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:65:b6:76:78:67:67:46:b1:21:1a:81:cb:bc:d4:96:21:
70:5b:04:cb:93:c9:29:41:f9:93:e9:de:31:cf:e1:92:fb:7e:
83:ca:c3:02:25:92:c4:59:04:fd:46:8c:3e:8d:3c:f8:1b:11:
98:46:3f:f6:d9:96:ea:6d:61:91:7d:bf:52:a0:8b:88:a3:08:
9b:64:c4:69:cf:3c:48:89:f5:e9:f5:0f:93:24:24:3c:19:57:
f6:aa:b6:3b:e7:1e:dd:77:ee:59:86:d7:92:1c:8c:7b:7e:81:
e2:b1:73:43:6b:14:4d:38:ad:e7:89:d9:26:00:5b:61:f0:6b:
6c:38:4a:94:a5:63:1c:50:67:79:7e:21:c3:02:a4:fd:4e:69:
ec:82:56:26:da:36:c2:64:cf:a8:2a:9f:68:74:62:15:56:42:
38:1c:7c:af:df:5c:dc:ff:87:89:e9:41:cd:5c:6c:a0:0e:8b:
79:4a:03:21:57:c4:1f:b7:a6:68:ff:b7:a5:73:a2:7f:71:5e:
f4:ef:06:9f:b9:77:1d:14:28:a3:c8:d4:5c:49:4c:7a:6e:97:
1a:c8:9f:0e:78:e4:7b:07:6f:08:90:c7:f4:ab:a5:c2:1a:4c:
8b:93:87:d9:54:92:60:3b:c0:ca:80:a9:8f:26:a4:72:9f:fc:
f2:8f:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:50 2026 by rpki-client