Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: oNxO9isG2dp9bxNsMnUbRg1RFmig57t2T4FOO9p4qHQ=
Subject key identifier: 7A:FD:EC:93:46:F5:1C:D6:DF:A5:F4:41:3E:61:45:91:83:FD:81:13
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019D371BA3C84B1907820246981F13C39EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 03C8
Signing time: Sun 29 Mar 2026 01:00:51 +0000
Manifest this update: Sun 29 Mar 2026 01:00:51 +0000
Manifest next update: Mon 30 Mar 2026 01:00:51 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: MVrk4av9iGxOqsevkGJRlfY0ZvRgQiDF3pCFKfkLdew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a3:c8:4b:19:07:82:02:46:98:1f:13:c3:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Mar 29 01:00:51 2026 GMT
Not After : Mar 30 01:00:51 2026 GMT
Subject: CN=7afdec9346f51cd6dfa5f4413e61459183fd8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:09:c1:ab:2f:5c:41:6c:97:44:c7:4a:fc:
cc:4f:89:26:8d:8d:ba:b1:a7:97:bb:27:f6:cf:d2:
2d:3a:54:77:44:74:59:35:e4:3c:5a:77:d9:40:b0:
ba:46:63:57:7d:0d:b3:aa:d7:e4:d7:b1:79:19:de:
b9:b0:e2:3d:f8:f6:27:92:f4:c4:37:b6:ab:54:57:
97:c0:2c:26:2b:2f:2f:d0:56:57:12:80:77:a8:fd:
4a:fb:20:4e:bc:b2:5e:ec:10:f6:06:39:61:35:83:
2b:7a:60:2f:b1:d7:2c:70:bd:01:dd:6d:6a:54:4b:
b9:7f:1b:3f:7d:ed:1e:eb:4f:88:61:87:d9:34:1b:
bf:a9:37:05:cb:53:53:d2:13:ca:ee:59:a3:8e:0c:
79:c1:08:bc:82:6f:0f:9a:7c:2d:80:7d:d5:8c:8c:
11:b4:65:c0:ff:aa:3e:84:cc:16:21:91:41:3d:0e:
1a:11:42:10:54:17:3f:69:ef:3c:c8:a7:5f:40:d5:
b4:a5:de:6b:09:28:26:2c:0f:ab:e9:68:9c:bf:61:
b7:b4:4e:ec:9e:7e:67:8c:89:98:7e:86:b4:88:70:
b6:0c:fe:44:45:30:5a:da:f7:91:65:b0:21:7b:b7:
65:3a:3f:28:cb:f1:32:e1:09:fe:83:9a:4a:da:0b:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:EC:93:46:F5:1C:D6:DF:A5:F4:41:3E:61:45:91:83:FD:81:13
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:28:ce:7d:c4:19:2a:b4:04:b7:db:6d:70:0e:18:b8:88:66:
67:3b:0c:37:78:48:52:70:be:03:ec:f5:7d:5f:2e:6b:c8:16:
b0:af:2a:18:0c:85:18:ea:c3:c0:cb:a7:b5:9b:11:99:c5:f3:
20:69:8c:ce:c4:9d:4c:40:55:15:81:cb:9e:aa:68:51:1e:62:
c3:dc:ad:eb:86:2d:c1:3e:72:75:5e:ec:2e:50:ab:c8:74:4e:
77:07:d3:94:9f:0a:d0:de:0e:e4:d1:00:03:83:ab:d2:61:b1:
2c:b2:7a:77:3c:87:45:0f:5a:a7:0d:69:bb:8e:b1:44:c3:2d:
43:cf:2a:f8:bf:b9:fe:05:78:a8:6a:b9:52:63:40:c4:71:cc:
93:11:c6:30:d0:9d:70:b0:f4:34:40:e2:d6:f1:05:e1:cf:2a:
b2:94:f3:f9:aa:73:4a:f3:68:07:77:62:b4:36:86:fb:c9:bc:
05:99:b1:d2:35:8e:05:61:2a:c7:df:8d:c4:68:8b:f0:0f:84:
a9:59:a0:ac:eb:31:3c:88:59:9f:f5:4c:f4:fc:bd:39:b8:97:
8b:fb:6c:35:61:9a:ad:af:0b:99:ee:ff:fc:90:c6:a7:93:d5:
7e:db:75:87:f5:bd:d6:31:58:02:c4:c9:4d:a1:4f:04:4e:0f:
34:4e:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:23 2026 by rpki-client