Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: 8w+vlQJY+Cog6hLel+LNVHabCquZ8nI3kMFfNzo6D8k=
Subject key identifier: BD:C5:2B:A4:18:50:DB:D5:7F:C3:18:8A:54:68:AF:68:4E:A0:9F:77
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019D37C0B14B6DF907C36517C276E3EDB865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0F1D
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: iKm+m+OD9lzS55VwmTdgoahutVDoWbz6n+1/wOMLjIg=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b1:4b:6d:f9:07:c3:65:17:c2:76:e3:ed:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=bdc52ba41850dbd57fc3188a5468af684ea09f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:db:d4:77:dd:49:29:5c:07:56:e1:ec:78:
06:b9:8b:44:e8:ad:8f:85:f3:e5:c0:12:11:3e:e6:
79:40:8f:fb:28:dc:16:bc:51:a6:12:73:d4:06:0e:
0f:b2:8d:f2:0c:fe:36:ea:85:49:d0:bc:3f:b9:cc:
3d:93:ba:e7:e2:de:b5:e0:30:a3:e8:8e:68:77:c8:
48:8a:22:08:c5:a7:4d:a5:c0:39:24:a1:31:92:eb:
ed:c0:6c:db:88:06:c8:75:f4:ad:9d:e5:be:df:fc:
9e:b1:43:35:66:32:db:58:19:3f:c9:ac:68:39:ca:
bd:5a:2a:07:20:0d:b6:1b:c6:af:2c:e7:16:4a:4a:
91:15:4d:ac:07:b0:4b:09:d7:74:35:9f:85:cf:5b:
b9:48:0c:f2:1a:2e:e4:8a:60:f2:2a:ab:32:6e:22:
1a:32:f5:c5:a1:a8:3d:94:84:94:9d:6f:a6:4f:39:
4d:d2:7e:79:fe:e6:ca:47:78:20:f4:fd:06:53:ba:
d1:ad:31:51:f9:5e:d4:ae:61:77:57:20:75:bd:ce:
ce:a8:23:00:91:e9:f2:3d:df:ce:70:62:68:d4:d9:
f7:02:83:af:27:f2:8e:bc:41:ea:cd:4d:07:d0:4b:
8a:39:53:16:e0:ab:20:bb:bb:84:d2:8f:83:e3:aa:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:2B:A4:18:50:DB:D5:7F:C3:18:8A:54:68:AF:68:4E:A0:9F:77
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:15:4c:d6:85:89:be:c9:b2:84:c8:09:fa:2b:76:08:1e:81:
79:2c:ba:08:a9:ac:f7:fc:a3:22:9d:40:29:53:fc:8a:59:5f:
91:a2:2a:d1:47:a0:f7:07:09:38:49:92:0e:86:21:98:a7:bf:
4a:ee:b5:02:d2:5a:ba:60:28:88:04:a5:20:cd:da:7a:44:4d:
cf:d4:6c:56:f7:4d:1b:5e:22:dc:36:76:0c:9c:f9:78:6d:d8:
c0:0f:e3:d7:78:06:e1:91:c0:4d:b5:53:e7:d9:52:c7:ab:71:
af:71:07:4e:11:c1:60:cf:54:38:6d:e8:2a:0f:20:08:54:18:
33:8a:6c:f1:6d:ec:e1:74:d8:ab:52:f7:be:22:fb:fc:11:b5:
21:70:4a:0e:d5:ba:07:63:81:d7:16:24:70:88:d9:48:f1:ca:
f7:d8:e8:13:62:93:d3:6e:bf:16:97:6e:86:88:79:53:57:1f:
90:5a:a7:40:6f:5f:21:5f:b1:50:cb:19:2a:a2:9f:e8:8c:65:
42:f9:77:fc:d3:03:fa:38:a1:54:4a:d5:33:59:0c:c1:7f:4c:
a4:17:44:a1:86:2d:10:2c:96:e7:8c:91:ee:90:d9:43:df:10:
f8:c9:9c:c8:35:e7:25:b9:50:c7:07:17:a3:bc:54:ac:52:87:
7a:f5:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:25 2026 by rpki-client