Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: OpRGvCFcvdndYUEdClnpvGtp8C4rLfHhtk5UsEoxNRs=
Subject key identifier: B5:B2:CD:B7:63:65:29:5C:CC:20:30:2C:D1:DD:7B:2D:41:5D:E2:63
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 019D3977C7E481408F704414A3D438849D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 05E9
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: C/JISXF0jWUkyHBoH3IGqwKcaOHDc10Gw2qwfvGYDhs=)
2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c7:e4:81:40:8f:70:44:14:a3:d4:38:84:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=b5b2cdb76365295ccc20302cd1dd7b2d415de263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:3a:11:49:5c:a5:d6:05:59:f4:24:6b:56:
94:86:ac:05:39:36:a8:47:b7:0e:ed:4d:67:da:23:
e5:21:b0:aa:ea:9b:3b:fc:3c:5d:b3:60:a5:87:a6:
f0:7b:77:b4:fb:04:8c:59:9d:bf:f0:82:84:f9:30:
47:81:97:e0:62:a8:14:f1:b1:15:bb:2b:1d:b3:70:
68:5d:26:ae:fc:37:bb:ec:08:bb:0c:51:6d:f0:dd:
f7:bb:a0:62:cb:1d:ae:c7:0c:f6:f9:c0:82:59:cf:
ec:77:b5:9f:25:c6:b3:cd:de:c4:63:dc:e4:15:d7:
35:3d:00:e3:84:d5:eb:b8:d3:79:45:00:0c:56:34:
f9:08:78:68:ea:a0:47:1a:93:9d:60:f5:92:d0:4e:
98:69:68:ee:6c:b4:ff:72:30:c4:b8:c5:ad:93:ab:
16:63:92:04:8b:1b:86:6f:43:45:20:be:30:d7:b6:
09:6a:3d:c6:0c:34:54:d0:0d:07:5c:9b:28:c5:cf:
f3:45:78:8b:8c:9f:01:e8:f2:23:0d:1a:a3:1e:7b:
ea:7c:bf:18:fc:67:47:53:ed:be:eb:47:98:29:e2:
1a:f8:e5:49:df:d9:67:f2:4f:6b:65:5d:c0:0d:5c:
e2:ec:26:84:3c:93:e0:fe:7e:1f:93:ba:f9:16:d4:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:CD:B7:63:65:29:5C:CC:20:30:2C:D1:DD:7B:2D:41:5D:E2:63
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7e:2f:b9:77:65:cb:69:3c:e8:b3:53:65:f3:8a:c3:d1:39:
23:d3:ef:d4:a8:c9:ca:4e:a5:8e:02:88:87:f9:65:d4:af:33:
6a:9c:2a:b1:b3:d8:1c:a6:62:c3:d4:f9:34:78:98:28:6f:b1:
38:2a:7d:57:81:4b:32:fb:48:55:ca:53:ab:9d:80:91:16:0c:
e1:cd:47:98:92:40:42:7f:17:cb:7d:da:7d:99:6f:a7:90:ff:
f7:dd:56:9e:4e:2f:f7:ec:ed:f7:5d:cd:f1:a1:6c:01:64:c0:
65:d3:7c:47:fa:2b:a4:d8:42:1f:03:aa:b3:ef:75:de:e7:8b:
df:7e:e3:88:c4:b3:bd:6d:3c:63:85:8d:5b:6a:2f:c3:85:c4:
f9:66:a4:8e:6f:46:f3:8b:17:cf:0f:92:f8:73:b0:8a:40:1e:
4b:f4:d2:0b:2b:70:76:5c:bc:0c:a2:b0:45:dc:d8:50:86:55:
33:5b:c7:52:b5:5c:82:d8:d9:95:6e:f7:d1:e7:3c:78:19:f6:
7f:16:f8:46:e0:6c:f1:90:a7:82:ea:0b:64:ba:80:8b:b9:9e:
a0:5f:d0:f9:d5:b1:69:64:b2:84:3f:0f:7f:83:a5:ed:02:bf:
30:d3:77:17:8b:37:fe:f9:54:e1:2a:6e:e0:0e:6d:60:cd:f1:
3b:37:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:23 2026 by rpki-client