Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier: ogeAH4MdUMk5rSac045+JXlXHTrLBEvN7BzD8+7R28A=
Subject key identifier: 9A:11:C9:57:C6:5C:1F:9F:79:C8:D7:61:77:A6:52:34:12:18:C5:CA
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 019D3909DA8A3C9A717AEBA3ACC5E24E585D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number: 0346
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa (hash: ivdcntVpXSIka4vCYKhRHNsu6xqEGJkVPOsPAJlSsGA=)
2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: xmcYAmqCyl7L/tB1FWb9Rg3Wf8M/3Vgk4qYBWJuvYCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:da:8a:3c:9a:71:7a:eb:a3:ac:c5:e2:4e:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=9a11c957c65c1f9f79c8d76177a652341218c5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:d6:53:aa:12:38:4b:65:6f:3e:18:06:a5:
93:40:62:18:38:1e:0d:3e:6b:07:2a:9f:49:27:ac:
e0:64:bb:f9:c2:b4:65:6a:1c:bd:93:42:41:17:e7:
7c:d0:28:a1:cb:96:8d:3a:eb:9b:24:fa:52:69:89:
32:8d:d9:72:56:25:01:bc:f4:8e:3f:ef:46:17:88:
35:7e:35:97:b3:52:63:0e:3d:3f:41:52:bd:c7:04:
b2:63:79:86:01:a2:28:fb:a3:c0:0f:58:4d:a3:7b:
29:1e:b3:87:3c:93:f9:c3:21:32:1d:e8:2d:71:55:
f1:a9:fa:da:3d:e0:ee:b6:8d:78:3a:6c:c5:fb:55:
60:7a:4a:7a:8b:65:98:8b:1d:78:b3:05:1c:61:cd:
dc:cd:5f:12:9b:ac:58:c8:41:83:f8:db:a3:9b:d5:
94:74:59:df:5a:c6:f5:ef:62:16:5c:f7:8e:c0:93:
be:09:a5:6f:ce:88:2d:39:c7:f3:1c:1d:b8:64:94:
98:b2:e0:95:74:25:68:44:c7:fb:63:b5:a5:52:42:
c9:f1:b5:dd:82:e2:fd:27:c3:67:d6:7b:b7:46:ab:
10:b0:16:fb:83:95:2d:0e:54:d1:b5:24:cd:3e:9f:
21:7d:24:02:4d:05:22:a9:e9:90:22:13:30:8e:63:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:C9:57:C6:5C:1F:9F:79:C8:D7:61:77:A6:52:34:12:18:C5:CA
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:3e:6c:01:27:3d:99:96:2f:d0:b8:08:3b:be:2d:3f:5a:
5f:66:83:ec:b0:a7:08:8a:ef:ad:74:f0:7a:57:9d:48:9d:6c:
16:d3:fa:11:ec:64:66:c2:cd:18:82:67:5f:2b:94:bb:dd:0d:
47:ba:5f:35:40:d7:3d:8b:8f:58:e3:d2:05:dd:60:88:9e:87:
67:f2:2f:3f:2b:5a:3e:d8:e6:05:ad:d2:27:5c:c6:22:64:72:
85:a3:97:7f:06:2b:bc:3a:db:93:c3:12:d4:7c:c2:18:28:cf:
fc:fe:4b:3b:38:12:ef:7f:21:55:fa:be:0b:8f:44:a6:7e:d5:
2e:2a:97:10:3f:5f:f4:e7:8c:db:b6:4b:f4:70:e9:8f:ab:b5:
39:21:91:e7:80:c9:b3:e0:03:f0:3c:df:b2:7e:14:97:b2:0a:
1f:ac:f2:21:45:ca:6c:a8:5a:5a:91:c2:bd:ae:3f:f6:95:33:
71:b1:fa:71:9c:eb:b3:54:1d:f4:08:09:0b:be:0b:26:f8:b3:
2c:92:dc:14:78:7f:bb:ca:92:c7:35:cc:e2:13:41:52:19:7b:
33:78:c9:f6:5f:d4:d9:f0:99:2d:18:69:0f:c3:cb:90:6f:ee:
f5:04:dd:b9:aa:ab:c6:5b:50:a2:80:ca:c3:d7:09:ec:53:59:
89:77:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:39 2026 by rpki-client