Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: EklGZg62epdMOpg+GYvXcmB7Cyzc1SiVeAqrj6UCHDU=
Subject key identifier: DD:E7:0A:21:45:A7:1B:FB:4F:8E:19:F9:D4:E3:35:15:80:4A:60:4A
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019D390A636BD71D7D235921D4185C7EE151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0BAE
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: PqaoSwenUlINiNp1DHvBbdao+M8tDXBJV4+y70l0yJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:63:6b:d7:1d:7d:23:59:21:d4:18:5c:7e:e1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=dde70a2145a71bfb4f8e19f9d4e33515804a604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:cb:f4:fa:b8:af:6f:23:5a:f3:8b:0b:c9:
5d:5f:54:ca:89:08:1b:1d:ca:d3:91:ee:2e:5b:4b:
4f:cc:3a:b3:ca:dd:81:7c:2f:db:15:1c:c1:f0:cb:
04:7d:9c:0f:96:79:c2:5e:9c:77:4c:b5:21:1c:8e:
09:2e:7b:b1:78:8e:6d:e5:15:6f:6c:54:87:73:2b:
53:90:e8:8b:e8:ad:dc:b2:fe:0d:8a:79:b1:41:ee:
54:c4:02:30:58:a6:ca:f0:0e:93:4b:6d:c2:6f:2b:
81:8f:4c:e9:bd:28:db:37:34:0b:ad:f0:dc:95:0d:
ea:4c:a5:ce:bf:b9:c5:a8:a0:e4:5b:8f:88:ef:0b:
ed:21:d7:f4:04:fb:3b:bf:ff:30:9f:df:7e:b9:ef:
8b:80:a8:19:91:e5:fd:0c:31:f9:82:92:fb:13:a1:
ce:f9:e9:8b:e7:cf:aa:a9:93:68:f3:4f:1c:ab:d1:
21:f2:5b:77:8a:96:b4:71:f3:1b:a0:72:d7:c5:a0:
ef:a1:fb:e7:33:3e:7d:cb:28:cb:b7:84:55:a5:78:
92:fd:16:e6:1c:d8:8f:b1:ba:f2:3d:a2:fd:39:a7:
dc:ca:bc:6f:50:3c:18:17:93:95:29:b3:f9:2c:c5:
e5:d1:86:61:6d:53:74:a7:39:9a:79:fe:6a:e0:18:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:0A:21:45:A7:1B:FB:4F:8E:19:F9:D4:E3:35:15:80:4A:60:4A
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:54:65:c3:65:97:52:34:ba:63:eb:be:d8:63:39:d9:9f:
d3:e5:d0:ea:98:d3:a7:33:61:1b:34:d6:fd:03:8c:4d:0e:2f:
a5:a1:9d:7f:0e:33:ef:3f:76:ce:1e:0c:19:1c:46:d3:77:0b:
6a:37:50:e7:bf:5d:12:ce:8d:ed:02:62:0c:78:36:64:ee:a3:
48:d5:49:bc:b2:46:a5:73:c0:1e:90:ef:49:69:c0:3d:b0:ad:
c3:b8:64:a7:65:81:18:64:83:1e:0e:b6:55:4e:db:64:00:36:
f6:79:f5:29:7c:4c:2b:a2:ad:b1:cf:59:11:dc:17:46:0a:36:
8e:c4:73:6c:84:c5:b8:68:72:97:56:18:35:99:c5:37:8a:ae:
71:5c:1b:42:c1:7a:d6:0e:ed:52:12:d9:f6:8a:a3:76:c6:d7:
95:1e:49:82:df:f9:e0:8a:17:04:d0:92:e0:87:5b:ae:4e:20:
de:fa:71:de:2e:d2:2c:5a:bc:db:24:52:62:77:9a:25:a6:42:
3f:21:d2:d4:5e:62:7e:89:de:d9:21:73:6c:a1:da:f3:49:f2:
0d:2a:c0:a0:65:d0:47:70:b7:6a:77:88:da:d2:63:b7:8b:12:
92:da:ec:62:1d:7e:b3:18:c9:be:15:c1:72:58:d3:0a:62:86:
32:d1:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:25 2026 by rpki-client