Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: Is+tN6/y14KuR1xGlvWk0M+jDo5sYsSU2m8CiwDgj2Y=
Subject key identifier: B0:D1:1D:BF:C5:E7:EA:8A:3B:C3:38:1E:1D:F8:25:70:F0:F3:7F:C3
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 019D07E6A4FCEF2C43D913CBF038136C4824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 04C5
Signing time: Thu 19 Mar 2026 21:00:49 +0000
Manifest this update: Thu 19 Mar 2026 21:00:49 +0000
Manifest next update: Fri 20 Mar 2026 21:00:49 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: 8q8V4x6CnJIwR5ahH3wpsQ/2j8+C6OC+vvJsACnxug0=)
2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:e6:a4:fc:ef:2c:43:d9:13:cb:f0:38:13:6c:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: Mar 19 21:00:49 2026 GMT
Not After : Mar 20 21:00:49 2026 GMT
Subject: CN=b0d11dbfc5e7ea8a3bc3381e1df82570f0f37fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:9c:bf:99:e6:1d:a4:42:7e:4a:0c:24:25:
98:e9:c1:3e:49:f7:3a:f2:14:da:14:22:04:d9:70:
6e:b7:08:86:3b:a6:2b:f0:3f:3d:40:89:2b:e5:1d:
0e:f2:b3:9c:22:b1:7f:4f:7a:08:d3:80:b2:89:b2:
41:12:ed:79:99:13:5b:a6:17:e0:35:3f:88:99:ce:
2c:e9:d1:55:7b:c2:ec:40:c4:12:3f:ce:60:bc:84:
b1:e7:7c:0a:f3:69:b9:df:25:3f:39:42:05:2d:68:
45:7e:df:b9:51:82:7a:2a:c7:db:0d:92:92:3b:93:
fe:b0:81:0c:d7:50:7e:53:21:8f:9e:ee:58:cc:e0:
e3:0e:f4:64:19:c1:d6:95:6a:bc:6b:ff:d5:1b:ea:
39:6c:c7:b8:b9:73:d7:a6:54:0e:5a:08:30:1c:35:
e0:2d:51:71:8e:a7:e7:50:a2:98:c5:24:57:02:bf:
e5:11:b0:f4:04:2b:dd:99:15:ca:10:92:72:01:31:
84:b6:2d:64:af:b2:55:3f:f6:8d:fd:82:33:47:38:
1b:09:db:07:da:c0:d6:8f:b8:d7:9b:b9:be:5e:e5:
59:c4:12:2c:f4:3a:07:8f:7c:3f:3a:fa:5f:56:67:
77:73:82:13:dc:de:0c:cd:2d:73:d8:83:49:b5:eb:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:1D:BF:C5:E7:EA:8A:3B:C3:38:1E:1D:F8:25:70:F0:F3:7F:C3
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:e1:7e:05:7e:92:6e:b9:eb:bf:f2:50:e7:7d:47:80:32:
59:2a:57:ec:64:e2:c9:34:ca:8f:c5:ac:46:97:73:d2:7e:da:
d5:f3:be:68:0a:58:4f:04:66:ca:71:eb:d3:89:6e:28:0b:9a:
ef:a4:41:14:26:30:57:26:22:c1:9a:16:5c:7d:63:5f:c3:eb:
7e:8d:12:c4:9d:24:7c:fc:5b:95:fe:6f:d6:5c:0d:da:95:0c:
e8:d4:28:a6:6c:1d:ab:26:fe:7d:5c:0c:61:61:78:c6:8f:1a:
97:f1:c8:a6:c5:75:ae:8d:0c:ca:a6:4c:37:08:f8:19:f3:7f:
b3:86:d4:96:7c:f8:f6:7a:c4:53:ec:d6:aa:df:73:2c:ae:a1:
11:84:33:dc:c2:a5:e9:cf:00:71:8d:66:84:bd:3f:80:51:06:
86:59:97:8b:c1:96:17:60:73:54:b1:92:81:b2:5d:a4:39:77:
65:99:d6:0e:0c:07:50:9d:7f:93:70:fa:e9:e0:12:60:36:79:
e7:db:76:20:0f:f6:a9:d0:75:e6:8f:45:66:8c:b9:46:a5:d6:
3d:58:7b:0b:96:0a:be:c6:ca:25:e2:60:39:ec:f5:fe:87:c3:
3b:63:a7:07:22:7b:0b:f8:48:74:e3:c2:1d:79:85:37:33:78:
77:86:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:35:12 2026 by rpki-client