Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: mHEd7Run8RmfF4cPNjHv6HRlzL42/sbbq6rOOTXztsw=
Subject key identifier: 21:41:4A:2C:CB:20:00:51:91:87:7C:E1:98:66:57:13:EF:C6:AC:7E
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019CC373320B1E78FCF2D8212E82D49E3820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 076B
Signing time: Fri 06 Mar 2026 14:00:32 +0000
Manifest this update: Fri 06 Mar 2026 14:00:32 +0000
Manifest next update: Sat 07 Mar 2026 14:00:32 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: rgomT5Y+hq9IeatAKgAvRo3XvIMFK13WwK0BEiDd530=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:73:32:0b:1e:78:fc:f2:d8:21:2e:82:d4:9e:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Mar 6 14:00:32 2026 GMT
Not After : Mar 7 14:00:32 2026 GMT
Subject: CN=21414a2ccb20005191877ce198665713efc6ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:48:66:6c:68:31:e2:ae:50:73:8c:c9:af:
06:d1:33:40:c9:4b:61:d4:9c:bb:45:6f:7d:d8:66:
89:3f:65:72:e2:ea:68:71:6b:69:4b:f1:ae:be:1a:
44:57:b3:73:47:1b:37:ba:31:1f:ff:75:0d:7d:cc:
06:46:0a:9f:7e:ac:8b:7f:36:85:2f:ff:7c:98:45:
2d:cd:c6:2f:b8:df:eb:72:da:da:1e:2a:46:2f:d9:
94:94:56:e4:b4:ea:49:c0:75:ac:cd:a9:fa:34:62:
b7:cf:cf:0e:22:45:5e:cc:47:e2:4f:b4:fb:3c:60:
2b:6a:2f:a6:f9:f2:3a:1b:2f:3e:3d:6e:9c:41:12:
e4:a8:56:9b:db:3b:0a:28:45:f9:8e:64:47:a5:49:
3b:c4:06:a1:8b:33:1f:c3:60:69:ea:cd:95:35:bc:
89:53:8e:4a:dd:4b:be:2e:ab:c3:ca:18:96:81:94:
29:b4:4b:90:62:e3:82:dc:e7:57:24:3d:19:fa:d0:
f6:8d:ad:c1:85:83:95:22:58:b8:7c:3b:54:75:9a:
6a:a6:73:e4:1d:e6:d6:28:97:d5:75:02:14:b0:cd:
51:ba:1f:80:6e:e6:90:2c:ef:75:db:13:53:65:d4:
81:a8:bc:88:aa:12:e3:18:d3:93:2e:27:84:07:a1:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:4A:2C:CB:20:00:51:91:87:7C:E1:98:66:57:13:EF:C6:AC:7E
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2d:17:72:36:8b:35:1b:59:e2:99:e7:6b:89:e8:27:f3:09:
8d:ac:25:bd:5e:ed:4a:99:72:7c:77:83:45:21:12:cc:dc:5e:
91:36:93:e0:1e:75:87:d6:26:c9:73:1b:ce:9d:3a:2b:d2:52:
97:30:26:a6:56:57:ef:01:5c:a0:b7:be:58:f4:9f:39:2e:f5:
17:88:11:07:6e:d1:0e:72:27:df:6b:a1:61:fa:59:12:6c:ee:
18:10:f5:f9:d8:48:1c:27:58:0f:31:b4:ac:c0:5e:61:06:de:
bb:d7:9a:f7:33:21:cc:a5:29:06:19:2b:d7:43:45:d2:38:b7:
02:9f:e4:48:c6:ba:ff:98:e1:1e:80:5b:f7:19:d2:c9:a5:bc:
35:0d:aa:ab:bb:ff:10:23:12:76:99:e6:7c:ff:f5:4a:04:09:
0f:12:80:9e:7e:1f:2d:30:54:f0:06:34:98:1b:94:f6:6d:e6:
c4:af:1c:99:b4:9e:bd:58:ee:b9:ad:0e:65:83:c4:9b:27:9a:
c1:cf:55:32:4a:e6:d7:1e:3d:24:a2:56:28:a4:83:97:84:71:
3b:4c:a3:18:d3:49:ce:08:00:da:b8:9e:b0:0b:29:36:f8:6c:
79:b3:30:f8:9b:64:a5:18:af:b9:97:c3:9c:f7:9f:47:e6:5a:
30:7e:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:03:21 2026 by rpki-client