Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: 4EDE3DKKmSENxMhHsLTuJkDYi9Bip5adBf+JSrwTbQs=
Subject key identifier: CE:84:C7:D5:25:CE:41:72:46:CB:B8:12:9D:84:AE:76:D5:96:28:B6
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 019D3A536E8AD922449124D9A439FE7FF498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 035A
Signing time: Sun 29 Mar 2026 16:00:39 +0000
Manifest this update: Sun 29 Mar 2026 16:00:39 +0000
Manifest next update: Mon 30 Mar 2026 16:00:39 +0000
Files and hashes: 1: 4NooMbKIS62zW-_aVVah6TCwlOM.asa (hash: vSsF5o3kUCrl02aYIIU2YsLPc8yAUwr3ZTIFQRFIEbY=)
2: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: 9anVCQPi5HZRfXm9ygIFOEdvruSSZ9LNzd3gma7Uj3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:6e:8a:d9:22:44:91:24:d9:a4:39:fe:7f:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Mar 29 16:00:39 2026 GMT
Not After : Mar 30 16:00:39 2026 GMT
Subject: CN=ce84c7d525ce417246cbb8129d84ae76d59628b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:f5:4f:4b:9a:cb:a3:a8:7e:58:de:c5:f6:
a8:c0:a8:3e:96:2c:c4:f1:7c:74:a5:1d:a3:ae:0e:
1b:9a:d0:57:4a:93:ec:ba:49:81:d5:2b:a3:61:c0:
74:a1:9c:24:e2:10:6b:3c:b6:0c:f6:78:54:bb:6a:
52:e3:30:94:db:ad:3d:dc:07:e3:62:5a:59:e3:1f:
ff:e4:72:6b:ed:56:2a:c1:f9:51:cb:02:68:6d:6d:
60:4a:f3:dc:67:49:cf:06:92:29:36:8f:90:f4:d2:
b7:06:c7:9c:f1:b0:b5:d4:2d:38:6d:e8:27:c1:13:
49:67:01:1b:ee:aa:e0:3a:66:46:60:7c:0c:9b:c5:
e0:0f:2f:39:67:c9:b1:c1:26:df:66:ce:e7:d1:80:
d7:2a:7c:f2:bd:d2:e2:6f:32:13:88:db:27:e1:b8:
22:1c:7e:76:48:c0:49:c4:8f:3a:d1:58:2c:26:53:
db:b9:a6:e0:2a:b3:fe:fb:1f:25:f1:5d:91:53:fe:
27:01:d5:44:04:d6:84:72:3a:15:ce:b6:d9:36:8a:
86:80:3c:c1:c9:1a:04:51:f1:82:c9:87:f1:6f:5f:
7e:78:34:1d:d5:9b:7f:b0:f7:4f:72:c1:30:de:b7:
3c:e7:16:03:5f:17:36:7b:36:9f:ae:5f:12:5c:23:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:C7:D5:25:CE:41:72:46:CB:B8:12:9D:84:AE:76:D5:96:28:B6
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b3:43:78:b8:be:69:2d:48:b2:76:b7:b6:33:03:c0:4b:e8:
97:3b:a1:79:cd:94:5c:fd:8f:09:26:0e:9a:68:5e:2e:db:e9:
40:3f:74:a5:33:a0:e3:10:13:a2:08:65:2c:5b:f2:b2:9f:a2:
32:d2:20:e6:81:e9:c4:ac:83:7d:1a:ae:7b:34:65:aa:1d:d1:
2c:cb:85:4a:19:7b:55:89:30:06:76:1b:ee:f1:3c:4a:03:95:
8a:89:8e:d2:c2:9e:a7:a4:fd:3a:1c:e1:bc:e8:a5:f5:db:47:
98:7b:00:d7:62:80:9c:79:70:80:34:a8:fc:95:17:c2:79:58:
ba:35:5d:e6:3f:73:f1:dc:3a:87:04:03:e3:46:49:c3:c4:53:
ff:c6:b7:39:64:d8:c2:ff:ff:a2:c2:98:52:3c:29:ec:8b:ac:
99:1c:60:c4:c6:c3:0c:98:43:e8:d0:e1:64:25:f1:ea:30:4c:
8f:57:67:f6:1b:8c:bf:04:ab:c5:34:83:bc:d8:c4:70:f4:e0:
29:ec:15:a4:09:7e:61:79:2c:9c:81:6d:a6:17:fb:0d:8f:a4:
46:c8:d4:65:45:c9:48:aa:d0:09:0d:be:74:fd:09:ba:c1:28:
c8:8d:78:19:43:3f:42:a5:82:6d:c1:f8:4e:0e:b6:07:e1:a9:
0d:61:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:59 2026 by rpki-client