Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: gHucXIXScwSmRX7HHLn/jEgQ1dLuQF+mDwGalNDUvEg=
Subject key identifier: A0:8E:EA:41:16:BB:AF:A4:8B:3B:0F:0C:DE:85:68:B9:38:F2:D6:61
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019D386624572400F6A29AB5823F38A041F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 154A
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: Pd577MUCbz6Azcm+CIaxcXAGGcUNZUuDKly4xMoKleI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:24:57:24:00:f6:a2:9a:b5:82:3f:38:a0:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=a08eea4116bbafa48b3b0f0cde8568b938f2d661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:e2:d7:77:34:26:ab:a0:42:61:2e:46:44:
cc:10:89:1f:c1:ba:5f:79:0f:2f:34:6f:c6:04:14:
60:75:6e:16:81:b7:48:1a:50:cc:d1:ae:ba:2a:e3:
1a:90:21:c1:2d:98:d9:dd:49:1a:a7:85:e7:5e:a9:
1d:9e:9b:9e:3a:d2:3e:eb:03:77:b4:08:17:ac:73:
c7:37:17:a2:2d:c3:49:93:1e:1d:74:ff:19:be:91:
d7:03:40:50:05:8d:d7:36:20:4f:35:ff:b5:3f:a0:
09:21:28:9c:cc:2a:aa:37:0a:f5:fa:59:a9:b1:f6:
b7:21:b6:97:72:4f:aa:23:c2:72:6d:7b:56:bf:7d:
28:40:32:35:32:2b:a9:8b:c2:4f:63:36:f8:f7:3f:
0d:ae:7a:33:df:fd:b0:49:45:49:66:4d:da:94:34:
05:9a:75:9d:38:1f:6c:a7:fe:c4:c5:c1:e3:95:9f:
8c:63:0f:ec:1e:c0:70:c3:2e:7a:d1:a5:f7:e2:98:
ed:dd:e6:b3:1c:99:ae:78:72:c8:97:ab:95:00:e6:
04:15:42:c0:82:dc:30:c3:6c:e5:be:37:22:fb:26:
e8:86:a2:18:c2:1b:3a:cf:b6:c8:1a:a3:28:77:bd:
fd:43:6f:e0:40:ce:46:23:b1:67:9b:0e:92:16:6b:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:EA:41:16:BB:AF:A4:8B:3B:0F:0C:DE:85:68:B9:38:F2:D6:61
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c8:4e:4a:b2:6a:a0:85:12:f9:41:17:82:8a:88:b0:1c:ce:
b6:3a:c4:13:93:84:de:06:69:87:97:13:e8:60:21:94:03:58:
b6:03:d1:91:6c:ea:15:b8:88:89:cb:89:c1:ac:09:b5:be:ca:
22:62:d6:7b:d9:c2:ac:7a:a5:df:41:25:59:1b:5a:79:35:9e:
f0:46:02:f8:fc:b6:40:a4:3e:49:fa:f2:dc:3b:8e:4a:2f:c4:
83:74:f7:2a:c4:76:fd:52:d1:66:fa:36:b0:4e:c3:7b:49:b7:
30:3a:3a:a8:09:44:9a:4f:57:b9:f0:69:5a:40:c0:b1:0b:c1:
8a:b5:ef:cb:aa:0b:ee:fc:9d:4c:71:18:0b:e1:fa:ef:19:28:
5a:06:dc:31:7b:3a:ae:de:68:69:1c:e7:98:d0:07:2f:62:a1:
21:ee:6a:e6:46:71:d2:33:56:ff:0e:da:58:15:81:6c:1d:98:
d9:31:09:53:80:aa:f7:77:55:b4:30:d0:29:3d:2c:58:73:45:
99:ad:97:b8:8a:69:63:36:11:62:29:ca:cb:2c:df:65:8b:7c:
be:87:b1:df:55:34:ec:97:9f:9c:50:32:1b:16:d3:82:8e:a4:
0b:80:b6:9a:05:b4:5f:3b:93:a0:59:02:93:db:cf:1f:cc:ff:
15:5c:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:13 2026 by rpki-client