Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: GEf7xkS9vDmPaN78q4IARWfUfW1MgJTJcAIIGJM7Pmo=
Subject key identifier: CC:6D:A7:2E:AC:33:77:1C:7C:BF:E0:0B:3D:0A:A9:90:38:CF:AB:A7
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 019D38D3B108AE451E67D9BE19A48E97B900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0FF2
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: kR1FThIvVFiYRoK/pFxc5nUeo7ES7t5T7WEMPG8eqHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:08:ae:45:1e:67:d9:be:19:a4:8e:97:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=cc6da72eac33771c7cbfe00b3d0aa99038cfaba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:7a:80:03:3c:bc:dd:65:bb:44:c1:40:a1:
f5:46:98:5f:ab:6f:e1:5d:3c:f6:01:ce:14:46:8c:
29:6e:5e:2d:76:ca:96:11:11:48:b9:b9:97:14:db:
19:83:db:3f:c3:2b:23:b4:12:11:09:5f:bd:73:13:
68:b9:2c:cb:41:41:a7:a7:f5:e0:b2:7a:4c:3f:d8:
05:9a:ef:1d:68:c7:46:31:9f:8f:c8:3f:c0:fc:54:
e7:89:c5:f2:60:29:03:3e:2b:05:42:a1:52:81:90:
c9:59:55:5b:7a:1a:5d:3b:ff:21:be:30:04:ff:e7:
a3:54:ce:21:9f:3d:a8:99:21:fb:9f:28:b6:dd:a2:
15:6d:4b:dd:43:46:94:27:20:86:52:8b:e9:05:2d:
af:b3:48:da:17:60:87:f9:09:19:1b:9c:91:4d:be:
10:4d:df:85:9e:b7:78:91:08:34:e6:9d:4d:dc:94:
f7:f4:1b:7a:71:2d:8f:86:86:21:2b:11:38:bf:ee:
5c:97:87:71:94:fe:70:80:57:fe:bb:ad:d5:b7:5b:
0d:d3:66:83:df:ab:e6:94:65:e8:3c:9a:81:2b:ac:
67:07:77:fd:f8:c8:0a:d6:55:67:ac:c4:10:fc:f0:
5e:b1:06:86:f0:21:0c:5f:64:50:82:90:ac:46:8d:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6D:A7:2E:AC:33:77:1C:7C:BF:E0:0B:3D:0A:A9:90:38:CF:AB:A7
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:48:3b:b9:02:82:25:17:69:93:d3:55:b8:ba:8c:8f:0b:
8f:e3:45:e5:35:ce:11:18:f2:1e:50:e6:91:73:67:57:d2:16:
50:74:1d:14:28:5b:84:f5:e3:d3:62:9b:b9:5d:64:1b:2c:fe:
fe:4b:74:3f:d8:4f:10:b3:ab:4d:bf:4f:8e:b0:08:42:99:2d:
49:ab:53:17:82:ab:21:1e:ad:8e:ca:4d:77:ca:59:5b:13:f1:
4e:e0:bf:90:0f:52:15:02:bf:53:7d:e1:e8:7c:f9:da:17:8d:
a2:08:d9:bf:0d:1d:e6:bf:96:7c:e9:63:82:3c:bd:33:18:ae:
33:50:fe:72:31:11:b4:32:fb:74:5b:10:cf:a2:d4:96:02:af:
18:6e:f1:60:44:13:54:a0:02:08:11:a0:20:a6:ee:c0:b1:89:
96:39:b8:75:42:02:f6:5a:d9:51:87:02:ed:7e:a8:eb:d4:9a:
a9:8b:73:61:36:ac:2c:2d:67:55:2c:4d:a8:94:d1:56:78:43:
f8:49:aa:5b:db:ac:1e:ec:ce:ee:26:1a:92:db:f3:fa:dc:a2:
26:51:92:a9:13:85:b3:88:36:b5:3a:7a:6e:da:e7:a0:3f:5c:
c3:00:99:a4:bf:bf:b8:82:9b:55:04:12:46:c7:f6:a6:31:85:
98:a5:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:01 2026 by rpki-client