Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: KtrvIG6Ljsht8KVh/k1V16vB6Pu1LZkYhSGda/xjsyw=
Subject key identifier: 68:DF:13:9E:48:74:84:79:27:71:4A:55:6A:0F:06:18:77:F4:09:6C
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019D39408ABDCC7F19B25285EF25F0D5CA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 14D2
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: sob7ur2q7Ndty30FDZdMXwIP4KqHUBdwUpcFVOAa5W4=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8a:bd:cc:7f:19:b2:52:85:ef:25:f0:d5:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=68df139e4874847927714a556a0f061877f4096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:f7:14:b3:be:11:bf:b9:35:42:e6:a9:05:
fb:2a:c9:08:2e:2f:d5:35:0e:d4:2b:e4:3b:b3:67:
52:45:7c:57:56:5e:d0:58:fb:19:28:ec:c5:12:a5:
e9:fd:1b:9d:96:12:a8:69:9c:8f:df:24:2b:58:ef:
d6:d1:eb:b1:d0:55:fa:aa:02:22:50:a1:04:b0:cb:
84:24:77:b1:f6:8d:eb:92:9c:22:46:a9:98:07:70:
3b:5d:70:af:21:cd:5a:25:10:e8:28:33:cb:2b:03:
25:ae:42:43:c6:fe:db:10:09:bc:bb:6a:aa:25:d5:
32:29:08:ca:0e:23:5f:51:40:18:b4:09:3e:ca:09:
03:0b:f8:19:4b:14:9c:58:12:ec:f5:01:0b:7c:21:
90:a4:89:6f:71:39:2f:a0:7e:db:02:5a:33:b3:c0:
74:a7:55:ac:0d:8f:54:a2:f9:15:87:c8:84:76:12:
65:ce:a7:a4:da:c6:9a:d8:40:f7:b5:7a:89:1d:a4:
fb:0d:9a:99:23:af:29:e4:6f:88:e7:47:39:3c:8d:
1b:7f:1b:ed:e1:44:90:e4:24:3f:84:de:85:a8:34:
0b:11:09:8b:53:59:1d:4d:31:28:26:38:f2:8f:6b:
8b:d9:05:c2:ae:1b:9f:44:49:74:ee:3e:b4:09:b4:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:13:9E:48:74:84:79:27:71:4A:55:6A:0F:06:18:77:F4:09:6C
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:c5:85:b6:b3:6e:b5:92:5a:5d:ab:31:1c:d0:05:ce:39:
7c:ec:d3:69:a4:ac:ba:40:3a:94:91:58:1d:42:18:bd:05:04:
93:6f:92:c0:28:d7:7b:da:bc:ac:ea:65:80:5c:fa:cb:d6:e5:
27:ae:58:60:71:c1:d1:55:15:1e:b9:60:c3:ae:28:c7:dc:d1:
dd:87:ce:e7:e5:1a:82:8a:63:27:bc:06:b7:3f:4b:bd:a7:a4:
66:e5:4a:ce:74:42:24:74:cf:df:f2:3c:51:58:5d:aa:74:78:
d5:a6:00:a6:21:28:7e:95:59:81:42:37:3a:43:3c:fd:b7:b0:
ed:26:1a:ec:96:54:ce:e2:7f:37:bb:ff:04:fe:73:a5:7c:3c:
36:ad:bb:b9:4a:4a:05:be:f7:d1:5d:1c:c1:24:e4:87:2a:70:
ee:48:f6:18:86:0d:a6:b6:b9:ac:69:f1:94:59:8c:e8:1b:a5:
63:40:7b:27:05:76:c1:b4:2b:df:ec:66:2a:86:1c:16:4e:de:
e3:41:83:94:2d:65:14:2a:cf:bb:7e:2c:c6:6b:dc:46:ce:6b:
9f:32:61:1f:b1:57:03:06:51:d0:22:6e:12:20:90:0d:28:14:
3a:62:76:77:10:9f:11:d8:7a:54:74:69:75:6a:42:b6:84:a6:
16:70:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:49 2026 by rpki-client