Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: amcEfBOSLBXH54lVuOPeATye3UA7uzNs/5hdXEqLPtg=
Subject key identifier: B5:FE:88:C6:71:5D:9E:E6:E1:CF:52:A5:04:52:C0:9C:FB:D2:EB:D2
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019D3A54A758642A8F973182857994198D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 16:01:59 +0000
Manifest this update: Sun 29 Mar 2026 16:01:59 +0000
Manifest next update: Mon 30 Mar 2026 16:01:59 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: gg5akC8GR/xo4VOvrVitPdC3heA5tSSnuphtmm9U3m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a7:58:64:2a:8f:97:31:82:85:79:94:19:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Mar 29 16:01:59 2026 GMT
Not After : Mar 30 16:01:59 2026 GMT
Subject: CN=b5fe88c6715d9ee6e1cf52a50452c09cfbd2ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:06:29:56:03:bb:2d:18:0a:c6:20:a8:86:
49:ca:2a:32:15:79:69:d9:b7:93:1f:1a:fa:c2:1c:
63:c9:8d:de:c7:d8:43:c1:46:73:d1:48:b0:ce:c1:
94:72:bf:c2:3f:b1:ca:c1:25:60:9c:88:35:d9:fc:
25:0e:c0:48:a5:ed:34:24:46:1e:8a:a9:7b:a9:3a:
ba:48:50:00:60:29:b3:60:f2:a4:1f:8f:a5:6f:9c:
77:23:c7:97:32:c6:6e:d9:9c:1e:c5:97:c2:90:d1:
9f:75:19:17:06:13:18:3d:17:ed:74:69:b7:24:1d:
71:e4:6d:db:5a:21:07:dc:19:0f:dd:d5:14:1f:c8:
20:0a:5e:f4:e1:55:3b:48:aa:8b:cc:8a:34:8f:97:
4a:d9:86:f4:e8:d3:cf:a1:8d:c2:8c:2f:e7:cf:ab:
08:c5:db:40:36:d3:9c:87:4a:5e:fc:e9:c8:51:58:
a3:a3:cc:42:ba:95:c7:49:55:e6:44:bf:cb:4a:74:
f8:c2:53:e1:b4:2e:e9:ed:55:bb:57:83:b2:60:94:
eb:3c:e4:d7:93:b0:88:c3:04:c0:bd:3c:d6:0d:13:
5d:28:f3:c5:2e:a7:04:e9:09:cf:26:3b:6c:d7:cd:
b6:07:d2:b3:96:49:94:e9:40:b9:61:40:c2:b6:5e:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:88:C6:71:5D:9E:E6:E1:CF:52:A5:04:52:C0:9C:FB:D2:EB:D2
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:5a:05:b9:88:a2:19:15:0a:91:6b:25:1f:21:db:23:82:7d:
f5:54:8f:d1:81:6c:7a:e9:09:53:c6:4b:2c:ae:3d:c4:fc:90:
02:0e:5b:18:ae:92:66:c7:73:7d:42:82:4e:b5:57:7e:ce:f5:
cc:59:4c:75:b5:55:78:91:19:c4:7f:64:70:16:81:c9:3b:41:
89:23:b6:7e:bb:1e:3f:df:51:6a:40:99:e6:4a:0d:df:90:1c:
c3:fb:cd:f0:2c:5d:79:08:f4:d7:de:b1:ad:9a:db:70:6c:a2:
1c:da:7c:8a:db:d2:c8:fa:4f:26:71:91:17:88:38:8b:3a:c5:
fd:28:e3:69:58:04:33:83:c5:f5:17:b0:f1:0f:45:b1:64:c3:
cc:1b:d3:11:e6:a4:94:96:4c:42:2e:6d:77:56:f1:f7:64:6d:
fc:20:1e:2a:6f:ba:d7:a1:49:d3:1d:18:0d:31:95:89:8b:7d:
0c:f8:cb:d0:a8:cb:65:5b:6d:9e:a0:30:75:25:8a:0d:42:b9:
13:22:4f:4f:ff:75:23:41:38:f7:e4:ca:37:26:d5:ff:d0:00:
ba:c7:10:6e:c7:0b:58:49:97:d2:7a:bf:b8:c8:7e:0f:ff:8f:
a7:e6:2a:19:e4:32:ab:b8:b2:2b:25:34:00:a1:92:51:a0:d9:
fd:f4:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:35 2026 by rpki-client