Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: tnYB2tgkSqfNpbH2QZN4tUfRXPR2lWKLAr3CyNJ3XI0=
Subject key identifier: FF:B4:6E:3E:1B:50:B4:92:6D:F1:FF:2E:89:58:18:9E:E3:02:AD:F4
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 019CE17DCD0F35129498E6F7B168D502D395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0BBE
Signing time: Thu 12 Mar 2026 10:00:43 +0000
Manifest this update: Thu 12 Mar 2026 10:00:43 +0000
Manifest next update: Fri 13 Mar 2026 10:00:43 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: qK2LiifxwS8tqzaArqNVpgAT1yLCkPuQIuWH6qzY3UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:7d:cd:0f:35:12:94:98:e6:f7:b1:68:d5:02:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Mar 12 10:00:43 2026 GMT
Not After : Mar 13 10:00:43 2026 GMT
Subject: CN=ffb46e3e1b50b4926df1ff2e8958189ee302adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:b2:2e:cb:55:e1:e0:18:0d:d3:f3:b3:96:
10:a0:36:88:5b:32:28:f8:89:29:a8:15:6f:41:97:
25:a5:45:bb:b5:d6:71:79:01:3a:7d:24:f1:27:3c:
75:2c:48:61:d8:5d:e1:78:39:c9:39:73:7e:33:cd:
36:c5:cd:2c:56:17:17:e3:9f:1f:57:4b:3c:14:75:
7d:56:1a:83:b5:1f:f7:76:8b:98:21:eb:47:c5:f0:
d9:0a:84:79:e4:c7:fe:2f:b5:ad:6b:a7:d6:2b:9f:
36:17:26:f1:05:9c:51:c8:44:c3:77:47:b3:07:cd:
df:11:41:fe:42:1f:45:43:12:69:61:8c:4b:02:34:
5a:0f:3a:d1:79:d6:eb:7e:84:a6:1d:80:4c:a5:16:
46:ca:66:bf:3c:e0:5b:56:92:2a:1c:70:65:eb:a3:
12:98:18:45:36:0e:b8:b5:9a:81:75:db:05:41:4c:
a1:98:89:ee:db:28:de:4e:28:5b:8d:2a:3d:c0:c3:
c7:f2:3f:68:ad:31:db:2a:7e:72:a0:4a:7b:c7:23:
fa:8e:13:a2:08:d0:62:7b:ab:86:56:aa:0f:de:69:
76:5f:76:47:bc:b1:6c:5a:40:ac:93:d3:d0:40:17:
5e:a9:19:45:d7:d9:84:b3:f7:bc:de:2e:21:c8:64:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:6E:3E:1B:50:B4:92:6D:F1:FF:2E:89:58:18:9E:E3:02:AD:F4
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:7e:e3:8a:73:e6:f1:61:31:d4:ef:73:4d:55:47:7e:d0:
c8:6c:37:59:2e:89:96:60:61:84:27:ba:6b:b0:d0:46:45:9b:
bb:9b:9d:fa:63:06:59:98:8c:ea:6a:ea:39:ab:c8:a9:2d:66:
33:3f:35:ad:cd:74:8b:01:88:49:39:55:23:a3:6f:40:c5:c3:
4f:01:4a:a3:a0:9b:88:dc:71:b1:e7:27:0c:1f:be:ea:86:b5:
0d:93:b9:53:b2:c9:6e:53:ba:d1:8c:c0:97:d8:d5:ee:cf:e4:
e3:96:27:fb:fe:be:82:b5:af:46:f8:59:b6:01:ec:3c:23:c9:
f9:65:4d:ca:f0:59:4c:92:a4:37:d1:96:20:7d:f2:45:16:64:
49:44:3f:fd:da:cd:e6:f5:d6:23:f1:94:ef:e7:2f:6e:19:20:
67:1e:37:0a:f8:12:d9:36:e4:20:7a:20:f0:4e:10:47:f4:4e:
50:9e:62:c6:fe:36:0a:f1:18:c3:ee:ea:73:59:81:b0:89:96:
90:5c:6e:ff:39:3b:a5:83:95:a2:60:8a:71:43:0d:54:8a:03:
34:93:19:ba:e0:c9:cb:09:3b:c2:67:83:eb:d5:df:da:a7:d9:
64:23:80:04:a0:17:ea:ae:14:e5:75:ba:4b:31:14:af:7a:bb:
23:44:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:15:20 2026 by rpki-client