Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: hvah2bjezvkheWUaFUpjcW0ysL9EnfwcotIV+4HwO9s=
Subject key identifier: A1:A2:2D:9B:FC:AC:4A:C5:EF:A5:48:5F:5E:69:83:5E:B4:1A:ED:03
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019D39AEEA534835B488992B0F4A00987DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 0356
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: 5J0CF09sBPzEQni2AsH1BFualkEtvyqr0+NxwEw2NFc=)
2: j9kxk_tAwUgeNl7TqWWToAuo7-I.roa (hash: zHNTjJflclZYXilnm9iiED1a7nYrKcFrqoiJZmNUrRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ea:53:48:35:b4:88:99:2b:0f:4a:00:98:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=a1a22d9bfcac4ac5efa5485f5e69835eb41aed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:2b:ec:a7:a2:04:31:f7:07:08:e5:fc:ed:
e3:03:33:58:89:49:09:4c:2a:22:61:12:ad:83:14:
ee:a1:77:8c:f0:cf:ae:79:1f:c4:4d:b0:3a:55:26:
6b:54:be:e2:f2:4a:08:72:9e:98:82:dd:38:3c:28:
04:31:95:d8:e2:16:3e:28:ea:e5:60:49:b7:0d:61:
dd:88:48:96:38:f6:5b:24:e5:99:a3:f8:39:a4:b7:
f6:d2:41:47:d9:0d:17:bb:46:d8:c0:89:1d:3d:69:
0d:d8:47:fc:86:30:43:21:a6:98:0e:c3:6a:03:71:
9d:73:75:a9:24:af:6f:68:6b:60:a7:83:42:25:5b:
fc:de:93:42:6c:4d:c0:99:6a:59:a1:46:32:8e:5a:
6e:68:77:be:1f:60:bb:9d:03:e2:2c:53:f6:78:5f:
20:71:74:71:83:57:d0:d6:7f:97:11:64:dc:ef:d7:
f6:b1:6f:94:80:f6:f4:6d:a3:ad:1c:a7:35:a1:97:
85:28:ea:3e:bf:92:5e:39:b9:37:f6:3f:ef:bf:47:
45:88:14:27:e7:9b:e8:87:d3:57:21:ed:83:2b:0e:
23:32:b5:a4:64:75:a1:d9:ce:de:25:dc:3a:af:67:
82:94:f4:0f:a5:f2:28:b8:cb:b3:6f:e1:d9:af:9d:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:2D:9B:FC:AC:4A:C5:EF:A5:48:5F:5E:69:83:5E:B4:1A:ED:03
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f9:07:f0:79:d5:f9:19:8a:eb:3e:f4:b1:1e:e6:d4:c3:6c:
a2:79:71:4e:5d:51:97:90:35:8a:db:1b:09:95:b8:45:68:cc:
76:45:0a:11:c9:b5:2e:8d:56:f7:10:a7:37:83:7c:bb:db:21:
89:4d:ac:fd:18:db:28:68:78:19:1e:2b:2b:69:02:49:ca:c6:
53:e0:d2:19:cd:a0:4a:b7:cf:7c:cf:58:5d:71:38:9f:0e:a0:
32:e8:63:ba:79:c4:88:27:cc:a3:3e:b7:8b:c2:7d:22:8e:79:
38:a9:d9:1c:5e:93:c1:f5:bd:67:d0:21:ab:17:80:ec:75:b0:
4e:59:b1:01:97:c6:20:d8:3a:4e:c3:4c:86:52:14:1c:09:0e:
c3:f0:1d:f7:24:52:dd:51:b7:b4:54:d3:3c:fe:41:5f:60:a1:
60:7f:10:de:54:6f:f9:09:31:ec:ad:dd:28:9c:4e:30:dd:5a:
05:98:01:39:a2:b6:47:05:4f:01:95:8b:1c:a3:53:fb:02:53:
1e:6d:94:33:1a:6e:5e:4a:db:25:02:c3:30:56:76:2d:2b:59:
8d:5c:4d:9a:a6:b8:8c:f1:d1:8e:cd:59:b0:66:8e:12:69:42:
55:ea:2f:b0:31:09:ff:c3:76:58:be:cd:06:ab:f5:76:1e:4f:
2e:54:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:54 2026 by rpki-client