Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: r+DjD4givHh/6jqvbI8LBv9kl73BR5nfXwtp2NdSpvo=
Subject key identifier: C7:57:2C:B6:C2:9C:37:09:70:08:B8:A1:B3:8C:33:27:C2:BD:AF:69
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019D38D326F0C7FF74110D4E249C7B46E7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 17B1
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: JZl+WtOqTwU1X/q3uixiHhilGEcFhdWCKG5OyidGDl8=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:f0:c7:ff:74:11:0d:4e:24:9c:7b:46:e7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=c7572cb6c29c37097008b8a1b38c3327c2bdaf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:84:e0:63:70:79:91:57:27:da:11:03:44:45:
b8:16:0b:3a:8d:40:18:80:aa:cd:37:f3:1c:61:91:
78:cf:08:b4:64:a1:2c:0f:f6:5d:57:d3:33:c8:49:
9c:f9:22:d3:84:c0:0f:41:f1:d8:3a:ab:e9:38:c7:
ba:ed:bc:c0:94:db:0c:c1:4d:60:01:bc:2b:98:14:
2a:9f:8c:5e:77:37:1b:15:ed:53:0d:5c:df:30:ae:
db:be:33:3e:ec:73:e7:94:a8:89:1d:17:70:80:d0:
bb:08:18:af:bb:4a:88:73:b9:47:ea:0f:53:5e:09:
b8:3c:70:c2:ae:21:3d:dc:23:0b:44:85:48:57:26:
bf:41:36:8b:c7:c1:82:9c:4b:b8:bd:ad:c8:5b:45:
c1:d9:a5:cb:0e:dc:3f:1a:43:33:f8:5d:68:eb:f0:
cf:7a:b7:30:c6:c5:91:93:db:65:4b:23:74:c8:cd:
eb:0a:80:77:88:70:3e:dc:bd:cc:c6:63:98:ed:a7:
d2:5f:c6:2c:fb:6f:55:5d:a1:a5:e2:17:94:25:c5:
91:21:23:61:f3:12:bd:ae:2a:70:f0:ec:9c:96:20:
29:f8:34:b9:9d:e1:d3:29:e3:3c:6b:39:2b:c8:c4:
f0:15:21:52:c6:51:35:6d:3b:dd:b8:80:d8:22:ba:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:2C:B6:C2:9C:37:09:70:08:B8:A1:B3:8C:33:27:C2:BD:AF:69
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:d6:32:83:ca:7f:b0:0d:1b:cb:51:05:d3:ca:13:d7:81:
05:a7:12:49:49:8e:49:ed:b9:bf:ff:0f:13:8a:c8:8a:63:7b:
03:cc:65:18:d3:93:0c:1b:60:f9:3a:ed:6f:ec:00:38:2a:02:
0a:45:d6:34:f4:dc:8d:12:bb:54:8e:ce:cb:6c:a3:2b:24:17:
c8:95:fd:37:a3:11:ed:fd:1c:94:9e:6f:b1:f8:d7:45:20:89:
1c:ae:c8:3b:77:06:b4:07:df:d6:22:63:9a:60:c8:7d:2e:f8:
13:53:b5:d2:e4:0c:3f:ae:ab:c2:59:8b:17:58:ba:69:24:c2:
d9:2e:86:37:43:d1:12:8a:d7:42:95:46:96:8e:5c:f8:47:b6:
7d:2a:72:a6:38:ab:41:62:62:97:3a:27:93:79:c8:94:cf:9c:
ac:6c:cb:ea:39:8f:b9:6e:33:20:e0:44:d1:2b:14:23:f2:86:
44:45:a4:db:35:6c:11:3e:7a:38:2a:f4:6a:e7:ba:d3:5d:54:
99:b8:d6:7b:99:b0:83:51:89:e9:49:5e:09:df:a2:51:90:cc:
f0:a9:19:50:33:a4:61:f3:2f:0d:61:88:ff:0e:b6:38:f9:3f:
97:16:c4:45:6f:1a:51:e9:4e:6f:4e:ac:7a:d8:ec:1c:0e:e6:
b4:c4:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:00 2026 by rpki-client