Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
File: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft (raw, json)
Hash identifier: vuhD56iISLzfPlg+LUnUrES9KzAhJM7xHcmzjfiwaDY=
Subject key identifier: 01:A3:84:1D:F8:C3:E3:93:8B:F7:19:41:41:1B:08:A1:64:E4:15:94
Authority key identifier: DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
Certificate issuer: /CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Certificate serial: 019D37F78CDA6EE611BA15F95820720FEF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: 3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl (hash: Y2tOqbVi5tqbki1ZZ1o0wy68nLNmq5MLAimQ05E5rZk=)
2: nJP4E1BCewAFvyQ9khu6K5PbIao.roa (hash: ECxIOroPlkk1P7RKbeML7Eha9aF0iyIC+Cc+BENCAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8c:da:6e:e6:11:ba:15:f9:58:20:72:0f:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcd70d3041b6e04b9c63c866681060879f33c33
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=01a3841df8c3e3938bf71941411b08a164e41594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:62:76:30:f6:ae:fa:e8:7d:23:0c:40:e1:
d2:1f:35:94:83:fc:20:e8:01:a6:14:a8:35:d2:e9:
e4:ff:59:54:99:b0:c7:4f:a4:8c:f7:a7:3e:b8:fd:
ec:a4:a4:bd:12:d1:36:5a:c6:11:58:71:da:35:00:
7d:9f:72:30:60:6b:f8:25:94:6a:f5:cc:7a:46:6a:
60:b7:8c:48:ad:77:83:1c:b0:6e:4b:15:9c:2a:cd:
87:ad:3c:34:18:b2:f5:f6:7a:d9:a8:13:93:01:f3:
46:54:18:be:0c:bd:f1:21:cb:f7:b8:54:53:82:58:
9f:34:30:91:50:c8:20:0a:97:14:3c:4a:88:92:20:
68:00:bb:f4:b3:0c:1c:9c:a9:04:d5:d5:eb:09:20:
92:a7:49:f2:db:7c:97:8c:f4:e1:ab:2b:76:94:74:
13:16:6b:1c:2a:ff:3b:99:77:9c:08:7c:b7:63:e9:
b9:86:85:76:87:94:45:d8:b0:a5:ee:7d:f2:e8:11:
2f:df:25:39:89:ac:49:ee:9e:25:7b:72:0d:3b:02:
6d:a8:49:03:f7:06:81:54:aa:b1:38:f8:dd:62:64:
f9:9e:dc:2f:0b:15:42:97:1d:e6:9d:48:27:fd:fa:
13:c5:26:7e:08:d7:b0:23:e7:c3:47:6b:ee:50:97:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:84:1D:F8:C3:E3:93:8B:F7:19:41:41:1B:08:A1:64:E4:15:94
X509v3 Authority Key Identifier:
keyid:DD:CD:70:D3:04:1B:6E:04:B9:C6:3C:86:66:81:06:08:79:F3:3C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c1w0wQbbgS5xjyGZoEGCHnzPDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a3b3be-957d-4777-9b64-d706bd0a6bed/1/3c1w0wQbbgS5xjyGZoEGCHnzPDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:7a:77:72:62:84:fb:e3:c5:ec:e7:bd:18:7c:df:82:3a:
a7:2c:f3:cd:c1:e1:8f:df:e5:54:7b:55:58:4f:01:f8:1b:7e:
f4:42:70:25:11:e6:06:da:a5:66:56:5d:bb:4f:ca:9e:21:b4:
29:6a:e7:16:70:49:eb:16:43:d2:f7:48:87:7c:11:29:be:c0:
1c:d7:89:05:97:23:fb:05:e5:de:a5:16:17:53:4d:03:a0:a8:
67:52:51:9d:c5:08:18:33:6e:ce:5b:b3:e6:5b:ce:67:6f:69:
85:67:81:67:44:b1:b2:b9:be:8e:68:fd:e3:aa:25:40:d9:83:
7b:1d:92:3d:d7:e6:84:4b:28:73:89:69:3a:fa:24:de:25:7f:
ea:0a:ee:29:99:d1:04:26:38:d3:a9:01:2a:f1:5f:c8:c6:28:
8e:6e:6f:9c:e7:9e:ce:45:36:f1:5b:c2:f9:52:db:d2:0e:de:
cc:7a:ae:71:27:64:2e:d8:83:f7:5e:6c:8d:b7:f4:2b:73:02:
26:d3:a7:c1:33:6d:0c:4e:58:af:c8:70:7a:5f:53:9a:af:c5:
73:c3:5b:96:cf:e4:7d:21:e1:fa:7f:85:40:f2:2b:6e:ac:12:
b5:69:22:d4:01:78:fa:d7:01:e3:a5:11:a1:45:a8:11:50:64:
3e:9b:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:48 2026 by rpki-client