Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: lQoCls4V90LnxFhzNUmtuaIGUQsidntwSS+tP077NhM=
Subject key identifier: E4:BD:88:54:D9:91:8B:EF:C3:CF:4D:FE:74:1B:BE:B7:F5:03:88:48
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019D386557CD00BC147131B37432F44B085C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: oY0P5U2zKzscwjyEyafI0RKFV8CswMK7M04MpEwQW80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:57:cd:00:bc:14:71:31:b3:74:32:f4:4b:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=e4bd8854d9918befc3cf4dfe741bbeb7f5038848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:5b:f8:10:9c:04:77:8b:5a:43:ed:2e:3c:
9a:3b:7b:76:b9:c4:28:e9:31:d1:9f:4d:a1:1a:92:
4d:b5:5a:c3:bc:5b:0d:63:c5:a7:e2:97:57:8b:97:
ab:d4:fa:96:40:de:0d:cd:38:cb:8e:6b:da:4c:24:
85:7e:3a:cf:2a:63:76:1f:d2:e8:c6:f5:18:51:cd:
6d:07:ca:32:50:a0:3c:af:8e:31:ad:b3:74:6a:8d:
f5:63:64:1c:51:f1:3e:8e:61:fd:93:d3:99:6b:6d:
f6:62:85:e2:fd:12:a3:8a:99:58:89:47:f9:d7:a4:
93:4e:81:37:6c:68:6f:54:6b:9d:bd:8a:1c:aa:24:
26:79:24:e2:20:c4:b7:4b:2a:4e:db:5a:3c:18:13:
9a:c4:45:14:ca:be:ec:93:c6:7b:a3:de:a1:2f:8c:
43:a7:f6:7e:bd:24:ba:1b:77:2f:c8:8d:1e:b1:b6:
a5:05:42:a9:26:41:a6:76:e9:2f:ca:b6:01:8e:33:
00:41:c3:21:f2:0f:bc:d8:a1:f6:77:04:a8:46:82:
19:d5:ba:14:85:ec:58:82:94:7a:d9:90:8f:b2:cd:
9c:5c:36:ff:ce:b1:25:f4:ab:57:2a:aa:e4:a7:da:
d4:d9:9f:bc:4a:e1:5a:bb:88:3b:b6:f7:2c:72:15:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:88:54:D9:91:8B:EF:C3:CF:4D:FE:74:1B:BE:B7:F5:03:88:48
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c9:51:d1:19:d5:8f:7c:7a:b0:cd:d8:ae:8c:50:27:26:93:
d4:a3:c3:56:e7:40:87:6e:9e:50:ab:1a:9a:26:e8:49:0b:01:
99:f1:bb:af:b8:3a:51:6d:68:76:62:11:36:ee:dc:0e:f1:f0:
a3:aa:dd:e9:35:e9:51:fb:18:ea:37:17:70:b7:b2:13:3e:65:
34:92:2b:97:22:30:d6:db:db:87:6d:23:56:b4:67:8c:de:6b:
48:b0:20:e9:89:ea:3e:4e:05:48:6c:11:f6:f2:9a:dd:2d:a4:
fa:1e:54:24:35:80:40:1a:5b:60:ee:56:cb:69:b4:7b:d3:22:
34:41:1d:65:7a:b7:22:e6:ce:7e:a4:1e:84:ab:f8:1e:3e:ad:
4b:78:c2:e7:51:1d:d0:fc:38:4a:ba:6d:48:3e:fa:1c:46:54:
28:9d:94:cc:90:fc:4c:c6:a7:a2:f4:86:ea:05:62:d0:b4:55:
c5:42:09:16:9a:e1:e2:7b:99:eb:9d:d9:04:b2:85:65:4f:fa:
b9:be:6a:94:4e:a5:2f:33:6b:f2:ab:fd:97:c6:2c:c1:3c:30:
e5:fc:bb:08:ca:99:df:0d:09:16:3e:b4:15:04:88:b7:0f:80:
41:ad:db:95:77:16:ba:e8:30:8f:46:d6:c9:d4:a8:69:b3:61:
2e:ef:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:02 2026 by rpki-client