Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: 0JWFlvw+AaLPJTcqu6e45sC09RCtvd0+A4ltb2hkGQY=
Subject key identifier: 63:96:FE:73:43:01:A4:49:CD:9D:68:2A:11:88:B9:2F:36:D8:D0:F7
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019D39782A1F72A9E1ED55E823EB30B5F899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 11D4
Signing time: Sun 29 Mar 2026 12:01:09 +0000
Manifest this update: Sun 29 Mar 2026 12:01:09 +0000
Manifest next update: Mon 30 Mar 2026 12:01:09 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: EkkbctRvJXBrLh/CwcMD5s2T6i3FVsO15FwrXe8MQwo=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2a:1f:72:a9:e1:ed:55:e8:23:eb:30:b5:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Mar 29 12:01:09 2026 GMT
Not After : Mar 30 12:01:09 2026 GMT
Subject: CN=6396fe734301a449cd9d682a1188b92f36d8d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:71:3a:6c:dd:fe:93:fd:f3:c3:8f:83:f7:
3e:ed:f9:68:fd:b0:7a:bf:7b:1a:11:32:21:eb:78:
f1:6f:fc:e9:16:49:3f:8e:0e:60:df:9c:f6:8b:aa:
27:4b:cf:5f:ca:cf:98:a5:0e:b2:3b:de:4b:7c:fe:
dc:af:7a:a8:8a:c1:b2:16:d9:55:3e:07:59:29:39:
22:45:c9:20:d7:b7:5c:78:91:88:b2:c6:8f:0c:40:
ef:6e:23:c5:1d:37:f3:f4:fd:5f:18:97:70:2b:ab:
30:ad:a4:62:f9:4c:9a:43:f9:f4:c8:7c:96:e3:9d:
7d:db:90:89:6f:98:d9:21:90:0a:b6:0c:98:63:69:
a5:e6:d0:60:86:f1:86:14:05:03:9f:f4:e1:a5:04:
50:f8:17:1b:f2:b6:ad:ab:c5:72:b3:e0:c1:11:09:
c8:dc:6f:34:6e:a8:b9:18:5a:0b:5c:1b:6e:bd:5e:
b5:e2:24:df:60:50:93:4a:b0:c9:44:f0:f3:ee:77:
8d:7c:76:04:22:8d:f4:1c:0b:e1:0a:e7:f7:30:9e:
3c:bd:16:c5:82:ed:92:bc:44:95:da:1e:a2:eb:5d:
11:f0:7d:12:68:0d:75:7c:9a:a4:fd:61:59:67:11:
3c:81:ff:cb:fd:95:39:42:f5:a4:98:01:92:25:29:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:96:FE:73:43:01:A4:49:CD:9D:68:2A:11:88:B9:2F:36:D8:D0:F7
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:40:ef:e1:38:fb:9f:58:34:06:46:c6:be:f9:48:7c:42:9c:
bb:99:72:59:da:d8:2d:e0:38:41:6a:a6:fb:53:6e:ad:2f:ab:
41:60:f3:e8:81:b6:46:d7:ec:dd:f4:04:69:b5:eb:8e:12:29:
ae:9f:ed:b2:bd:71:cf:dd:d1:76:67:cb:11:37:9d:a4:77:91:
e7:90:eb:f9:87:79:70:fc:82:7e:21:2d:db:3b:32:de:9f:a3:
80:57:7a:25:39:11:9e:ec:a2:af:b4:ee:d2:67:c2:d3:37:57:
d8:ba:35:fe:07:69:1d:83:04:8b:7e:85:35:42:2a:7a:ce:b0:
7a:52:a7:10:54:e9:50:5d:4b:d7:7a:06:39:6a:b6:7c:af:20:
b0:1f:ef:ef:4e:ac:05:0a:98:06:24:d3:04:fe:57:5a:28:88:
1f:cc:54:54:41:aa:90:fd:61:ef:95:58:dc:eb:43:83:ec:17:
bd:da:74:3f:d0:bf:0a:ac:2f:a7:33:1c:f3:14:7f:68:b9:16:
76:28:a4:44:c7:c0:52:df:06:b4:6d:7d:b3:71:7f:4e:80:d0:
ed:3b:00:46:33:d1:ee:9e:d2:16:f4:00:c2:7f:9a:1c:48:03:
d3:42:d7:e9:03:c3:00:32:39:85:29:79:e5:93:16:f2:bf:0a:
4e:1a:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:44 2026 by rpki-client