Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: /YGPXgKF8/NU6u/YwUNmuGHCL0sYeeMRRwimkJtpOqI=
Subject key identifier: B6:88:12:CE:B4:EF:E8:9C:C3:60:32:AD:42:09:87:BB:92:F1:FE:8C
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 019D39411EA10233012EBFEB20527CA036B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0EEB
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: SpA87UKajLNO3U5E/GutoBdMAfQDEwZx8ndpK/DoiAs=)
2: v4jlzQPH9B19BgnawF1RP-229sY.roa (hash: b4H5XHOj6d5z6OnvgwQoCpKZ6CNBYc2Lt4zW82aMu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1e:a1:02:33:01:2e:bf:eb:20:52:7c:a0:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=b68812ceb4efe89cc36032ad420987bb92f1fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:73:4e:b2:9c:b4:7f:45:0b:16:d2:d0:2b:
17:38:54:76:51:bf:40:d2:48:24:ba:95:e1:b4:fe:
d7:86:c1:07:1b:05:24:34:45:15:11:2e:e5:27:12:
7b:17:2e:3c:a5:8d:ff:9d:89:c3:54:23:87:8f:08:
c2:23:fa:f0:f9:4c:ad:77:cb:06:87:6c:44:22:26:
f5:dd:24:dc:fa:c2:3e:cb:06:e7:7e:15:7b:32:b2:
05:2a:e8:8a:a6:07:f1:27:ea:51:ae:64:1e:ca:9f:
91:f1:7b:e7:1f:38:20:ee:c2:93:ba:97:04:a4:17:
e1:e3:b9:1b:9c:ff:03:96:78:6b:c7:2a:e5:a8:6e:
ac:2e:bb:68:71:8d:54:b9:de:9a:ff:b4:03:4d:ac:
40:9a:29:61:b5:4f:01:4c:43:09:5e:42:6d:1e:ec:
f9:1b:d9:14:97:4a:73:94:d3:82:a8:11:de:a9:3a:
c5:4a:e3:67:1c:76:04:27:06:2a:7b:14:1e:36:ec:
5d:23:fc:bd:77:1a:23:88:de:19:24:91:6f:9c:0c:
74:43:5d:9e:36:2e:be:51:11:42:2c:55:0a:df:b4:
2e:d9:1f:4a:53:e7:c0:b6:de:2a:ee:07:51:0e:5c:
d1:51:62:aa:93:21:93:ce:b5:64:4d:10:5f:d3:59:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:12:CE:B4:EF:E8:9C:C3:60:32:AD:42:09:87:BB:92:F1:FE:8C
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:a9:59:56:2f:3c:f0:15:10:db:f7:da:d9:05:30:e6:d1:
16:e4:75:ed:ba:9d:ea:5f:42:07:bf:97:1c:f2:c5:f4:67:59:
ea:8d:ac:a0:46:ba:6b:43:c4:31:50:bd:4f:2d:a7:4b:fb:48:
e4:c6:69:1d:4c:de:e4:4c:be:d4:06:6e:66:b1:d3:2b:8e:77:
40:6f:cb:7a:84:8c:1a:68:bf:ff:61:04:02:f3:ad:36:e7:c6:
40:19:78:2d:5e:2b:e9:df:8b:36:72:f1:bc:b2:d1:90:2c:dd:
fb:89:85:1b:7c:36:bc:6d:c9:58:97:71:01:09:a1:c5:cf:6f:
f5:a2:5d:22:11:de:66:5b:37:f0:2c:87:39:23:e5:d0:57:21:
d0:37:8f:67:e7:a2:94:ad:d4:00:a6:82:d9:b5:a9:3c:f1:53:
00:24:37:1f:d3:3e:15:e5:db:e9:9c:65:3c:c9:04:98:56:e2:
7a:02:80:ef:1b:1b:6a:7c:b4:b7:18:0b:e2:19:cd:0b:c6:a0:
52:af:25:c6:45:2e:58:14:a0:b6:82:dc:01:ad:a4:5e:c0:1e:
b0:76:bf:d8:7d:27:05:a2:dd:fb:94:25:0b:58:f9:44:2e:ff:
59:4e:4c:49:3c:09:69:b3:6b:00:e9:49:74:ac:80:18:c4:56:
cb:5e:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:52 2026 by rpki-client