Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: AKQBGgMrYH9yFU9y/AZewhJMYny9fcyCzYWgx7wzmxs=
Subject key identifier: 32:9C:03:DB:F2:1B:77:05:AC:18:D9:3B:B3:52:67:A4:88:27:D9:E0
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019D394104B4EFC059E418F566083AA77316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 13C3
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: eF2z0fsddBH5dZcRsw3ItqTZXbKeMlSdW57kLiggh9s=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:04:b4:ef:c0:59:e4:18:f5:66:08:3a:a7:73:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=329c03dbf21b7705ac18d93bb35267a48827d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:0b:37:e7:c7:9e:a4:21:7d:9e:85:11:4a:
fc:cf:a0:41:0d:f7:6a:19:c0:90:e8:4f:8c:4c:2f:
90:f4:ce:c7:c2:cd:79:6a:7e:b5:dc:f0:cb:14:c4:
0e:af:5b:6d:a1:60:2a:b5:37:b9:32:eb:a6:4b:57:
77:e1:40:f9:02:46:74:d6:0e:9c:3c:a0:27:f6:ac:
f9:f6:40:f0:18:76:8c:07:b3:24:38:65:53:b8:75:
bf:aa:08:a8:dd:d4:96:a0:ba:07:25:8b:aa:63:dc:
01:dc:db:33:45:bc:1d:d6:76:07:92:21:a7:00:f5:
f0:77:36:92:8e:a0:ce:94:e1:af:28:15:cc:79:3a:
a8:f3:a2:8e:7b:c1:12:ae:c9:f0:2b:06:9b:a7:42:
c0:d2:04:f9:a1:df:aa:0b:b9:5b:ff:fb:89:87:07:
92:2e:69:31:a2:37:b8:62:84:03:40:3c:34:ca:b7:
3c:18:71:c0:3b:92:b9:6d:32:55:5e:9b:bf:58:c2:
3d:09:78:99:db:c0:a9:5c:25:29:ec:91:c7:26:1a:
ee:a6:84:a7:b0:ea:9b:aa:55:92:27:eb:69:de:85:
f7:ea:9e:e0:1d:44:29:d5:38:cf:e2:f5:47:be:a7:
19:a4:d5:56:6b:97:24:c3:79:51:a0:73:80:be:6b:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:03:DB:F2:1B:77:05:AC:18:D9:3B:B3:52:67:A4:88:27:D9:E0
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:4b:24:ad:56:e6:1e:e7:6e:0f:1f:51:4a:63:54:65:ff:
06:76:fa:d1:f9:95:0d:3c:5a:7f:3d:99:a8:20:ee:9e:26:59:
02:52:82:78:15:94:7a:5d:5f:dd:f0:1b:b5:93:60:80:c2:1c:
5b:18:da:af:11:0b:b8:e2:75:79:e7:38:84:5b:bd:82:8a:78:
f3:14:9f:ee:69:91:cb:27:0c:ef:d4:ca:d1:b6:d1:33:a7:98:
b2:04:4b:8f:aa:b0:f0:8e:d5:c4:98:58:4f:5a:a0:c9:a5:5d:
df:51:83:96:4d:25:b6:c8:48:8d:ca:c6:4f:ae:5e:8b:ae:68:
41:df:04:57:25:04:c1:af:17:7b:1f:e8:5a:d8:d6:12:40:95:
64:16:17:a9:19:95:c7:26:98:4e:03:1f:04:eb:9d:bf:0e:98:
cc:68:9b:03:57:eb:79:aa:05:26:e8:50:d3:bd:ae:2c:aa:5c:
f6:43:40:98:e3:2e:18:de:0d:47:bd:6b:45:c7:b6:88:af:7e:
0b:19:64:da:b3:f4:5d:60:a5:60:e4:04:7d:bd:4a:97:25:4b:
64:6b:ac:d7:94:e5:bd:b1:33:56:ef:0b:c0:bb:07:4e:61:09:
9d:e1:b3:6f:ea:14:3f:95:c2:07:47:e4:b9:ac:dc:d9:c1:17:
5e:b6:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:22 2026 by rpki-client