Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: nV/23/SlPucZ57f+XpR0TIMWLwiVfBuSe+peXKQCEUc=
Subject key identifier: 54:49:86:46:6B:95:38:44:20:9C:6C:6A:09:93:A1:EA:FF:61:5C:D3
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019D386602F872375168899E83BC6FEED4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 1078
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: +mYpuHughhKYhjI8A9AYT2AEoj6BjFJZIgaSTsFjmpk=)
2: 41nL5ZV4qJFS5Q2xxQRuLMPoip0.roa (hash: BJiNQu65WQwhnTLfbv69MpyE5IwMrQPr3mJhDc7s1uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:02:f8:72:37:51:68:89:9e:83:bc:6f:ee:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=544986466b953844209c6c6a0993a1eaff615cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:a4:07:45:b1:5c:e7:57:92:04:77:cd:d3:
9a:30:e6:68:ea:71:47:a2:c4:3d:70:15:42:5e:a7:
84:ec:3f:7c:81:f7:ee:b5:ff:be:e4:83:a8:4b:83:
ee:13:cb:3f:e7:14:f8:be:a8:b9:49:db:76:af:1b:
62:83:13:66:d4:41:bd:9b:0f:f6:1c:ff:e2:7d:15:
8b:3f:5e:10:6f:15:39:68:2d:81:64:c0:99:76:22:
67:43:65:85:93:d1:63:77:1f:fa:6f:3d:c7:72:6e:
8b:96:00:a1:0d:90:86:53:d3:77:c4:27:67:3b:4d:
9d:72:7f:4f:16:2c:34:e6:d6:fe:37:8d:99:65:ce:
04:f3:50:84:69:b0:95:b8:c6:2f:f5:73:0d:cc:0f:
c4:c1:6b:af:3f:2e:5c:cc:78:03:7a:ee:1a:40:01:
1e:d7:14:39:df:7d:87:54:6c:9e:82:8c:63:f6:05:
9c:c9:1c:a7:86:7c:cb:a6:b7:81:5e:78:13:0a:97:
b3:b4:b1:42:5d:9e:21:54:86:64:f8:4e:ce:00:33:
5f:a4:9a:e9:c0:11:4d:24:ed:a2:a4:00:99:4c:fb:
73:14:80:83:ce:02:e7:2e:66:bc:04:97:9a:b8:24:
3c:93:22:ab:db:fa:52:5a:31:72:7e:f0:df:39:9b:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:86:46:6B:95:38:44:20:9C:6C:6A:09:93:A1:EA:FF:61:5C:D3
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:36:38:40:96:c1:6b:18:35:da:b0:ee:ee:a6:df:3d:9f:
6b:47:70:06:0a:b9:55:aa:22:78:7b:f3:b8:c5:65:9c:10:11:
b4:77:08:bc:48:35:05:4c:dc:fa:13:4b:90:8a:ad:a3:b0:b9:
6e:a3:e8:8d:e5:7a:d3:39:62:93:58:05:ab:cc:9b:34:c2:90:
5d:03:88:0b:69:6d:24:52:37:43:4e:9f:5d:bc:f1:aa:da:d2:
83:61:ca:dc:ce:cd:ac:02:92:b2:38:39:3a:a2:41:b9:de:5a:
13:ce:c1:a4:16:5f:27:a3:03:1b:6c:60:4d:6d:fd:c8:de:fd:
bb:c6:20:4e:eb:7d:cb:3a:14:c1:c5:8a:ac:d0:dd:f2:c2:1f:
f6:3f:fc:3b:27:ff:54:dc:6b:d4:40:92:85:3c:ab:ab:32:32:
b6:b0:49:10:de:09:aa:70:2f:eb:dd:b7:e6:6e:47:a5:8a:08:
f6:ee:70:b3:f3:f2:d5:fd:5d:3c:4a:13:cd:64:3a:48:aa:bd:
a9:d9:05:ae:9f:63:48:a9:3a:cb:d2:10:f9:cb:11:a2:db:c4:
5c:46:5b:83:aa:ce:87:08:77:57:f5:27:33:39:f9:a6:c4:eb:
58:28:2f:fb:c8:c2:da:a1:c2:a0:28:c6:ae:06:5c:5e:00:32:
a0:e7:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:01 2026 by rpki-client