Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: Kes7p69pn9lqYxSrsVl/IGwS7EHfK3AS9IL+KkhIQdM=
Subject key identifier: C5:EC:BC:35:1E:89:1F:B2:E1:43:DE:7D:0E:F2:D7:77:EB:FB:32:C5
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019D3752E8C5A848ADF1F23CD2EE915EBAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 02:01:13 +0000
Manifest this update: Sun 29 Mar 2026 02:01:13 +0000
Manifest next update: Mon 30 Mar 2026 02:01:13 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: 6saDyXHm/kCyLjJEWxH+PytfmvZTmU+5XCBPAMq76cg=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e8:c5:a8:48:ad:f1:f2:3c:d2:ee:91:5e:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Mar 29 02:01:13 2026 GMT
Not After : Mar 30 02:01:13 2026 GMT
Subject: CN=c5ecbc351e891fb2e143de7d0ef2d777ebfb32c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:da:83:06:de:9c:d3:34:ec:b4:da:88:4f:
c3:59:62:e8:e7:a5:b5:8e:df:03:30:a5:43:28:43:
47:7c:32:0c:38:b7:98:6b:2b:65:5d:ec:bc:fd:fa:
bc:5e:5f:6e:bd:67:3c:2a:07:7d:21:e8:72:57:a7:
81:d0:ea:5e:02:fb:4d:2d:ac:e6:ce:9f:99:8b:9a:
74:c9:32:ab:32:84:ff:06:9b:f3:d5:5f:52:e4:f5:
92:ab:f2:13:bd:b7:2e:d5:3b:04:d1:54:d2:69:20:
f6:86:b4:f1:ad:04:28:c9:dc:0d:18:50:ba:bd:0d:
b8:15:17:05:32:7d:16:83:5c:c0:06:00:6e:36:8e:
d4:07:db:1e:04:95:23:14:3e:ca:30:ca:d2:03:01:
d9:24:6d:5d:8d:94:e6:e5:5e:d5:33:ca:e6:a7:3d:
07:bf:2a:a5:48:9b:46:0b:f6:0d:9e:bc:be:f5:2e:
86:99:11:eb:3f:70:fc:c9:09:fb:90:14:26:9c:96:
90:bf:ba:84:09:66:32:e3:b2:60:4d:ea:f8:45:ba:
59:e0:09:8b:5d:29:2c:a2:70:ec:10:e1:31:d5:6d:
1e:d3:f5:87:64:d3:0a:24:59:60:c7:44:7c:bd:e9:
1a:75:b0:dc:97:07:30:0f:2b:14:31:8d:63:2e:e3:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:BC:35:1E:89:1F:B2:E1:43:DE:7D:0E:F2:D7:77:EB:FB:32:C5
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:3c:8f:7d:45:73:77:3d:47:99:bd:56:06:fa:1d:24:0e:
5d:65:44:3d:27:a7:51:01:55:05:6d:c9:51:e4:9e:87:45:62:
ca:13:04:34:a0:b9:ef:7f:0d:40:a1:dd:b8:a5:4a:d1:01:e0:
16:0d:c8:86:87:55:7e:01:91:1a:5a:ff:0d:22:51:14:8c:a6:
f4:16:f1:2d:ce:35:5f:d5:35:54:44:98:38:6b:ae:c9:e5:ae:
34:37:af:fc:0f:63:69:e8:9e:5f:e0:97:a8:33:97:13:a9:d5:
ad:5b:7a:bb:d8:c5:62:c8:8e:eb:be:45:92:16:98:ba:10:01:
a4:3e:7d:7a:29:7a:25:3a:81:ed:9d:0d:e4:ba:cf:35:1f:c3:
2e:9b:51:ee:7d:72:4e:fa:79:cd:43:88:b6:d4:a4:63:96:4e:
51:99:90:bc:4b:65:64:8e:91:28:c4:05:ed:6a:e0:b2:f1:8c:
8d:7a:33:1b:23:47:bc:3b:6b:fb:ff:ae:36:20:6c:00:0c:f6:
b7:88:7a:5d:63:77:c5:21:3f:8c:9d:f4:c7:19:54:5f:84:08:
b8:ea:5a:6d:87:3f:72:b2:5a:a0:56:7e:72:58:12:e2:bf:ec:
76:25:5a:1c:c5:fc:8c:44:77:b1:f4:fc:6c:5e:22:2a:a4:31:
8e:c8:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client