Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: KWV3r4qn9zqkm+CL/W3ZZH+y+6BkWvWsOT9Z+BqZoYo=
Subject key identifier: 38:06:24:1B:09:FC:F9:7D:60:E5:DE:9C:7E:9F:85:7E:F3:A1:D2:C8
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019CF23A510D015777A0EB644814D86A4D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0CFA
Signing time: Sun 15 Mar 2026 16:00:33 +0000
Manifest this update: Sun 15 Mar 2026 16:00:33 +0000
Manifest next update: Mon 16 Mar 2026 16:00:33 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: HNd6h6S3nBVpnC+0g1fsf6JWoRl95VXepUpcEGXi1PM=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:3a:51:0d:01:57:77:a0:eb:64:48:14:d8:6a:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Mar 15 16:00:33 2026 GMT
Not After : Mar 16 16:00:33 2026 GMT
Subject: CN=3806241b09fcf97d60e5de9c7e9f857ef3a1d2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:e1:65:f4:f2:bb:26:60:61:27:58:fc:58:
af:a4:21:e1:0a:5b:01:d8:bc:39:69:f7:c3:f3:1b:
2f:61:6a:fa:80:c2:b3:cd:03:37:32:56:17:a7:02:
f9:73:bc:ad:8c:f2:06:24:14:d6:74:8e:25:c5:f1:
82:a9:0c:d4:25:02:cf:f2:dc:da:a9:fd:cb:9f:cc:
b3:dc:93:81:de:b0:91:53:f5:e8:fc:96:52:6b:46:
5f:47:3f:18:9e:11:29:e7:01:34:a8:bf:d9:25:9a:
33:cd:70:3d:2c:09:0c:ab:be:a6:96:c6:e1:7f:4c:
f3:1e:fc:2b:1d:9c:7d:8d:c3:cf:2b:26:f1:4f:54:
66:d7:7a:c3:60:c8:af:f4:6b:8c:6c:76:40:bb:49:
96:d6:73:2e:2b:fe:bd:ee:a8:a4:f0:42:75:db:87:
85:d3:5e:b7:ea:8d:d8:1b:d8:55:b2:11:92:e6:69:
2a:3d:11:3e:e1:2e:7c:2d:57:37:14:9f:c7:3d:0f:
d7:b5:61:b3:92:c0:f5:5b:32:8f:1f:ae:9f:7d:73:
fd:7b:74:96:1c:db:72:b2:02:fa:32:17:60:7a:f9:
ca:c0:53:bc:08:dc:90:96:18:2c:97:8d:64:cc:98:
92:8c:8e:2b:11:14:84:8c:14:7a:0c:c1:0c:27:25:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:24:1B:09:FC:F9:7D:60:E5:DE:9C:7E:9F:85:7E:F3:A1:D2:C8
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:cd:9d:2f:4b:fe:9d:6f:43:77:f9:40:00:7d:46:27:36:
7c:1e:32:e6:0d:31:a4:0b:6d:aa:38:f8:30:26:62:f1:84:38:
81:ed:07:fc:3c:50:25:f8:62:79:46:0b:d9:4c:b3:c7:9a:b9:
73:71:f6:de:8d:ae:64:d1:ce:81:b2:03:40:3d:23:ea:fc:67:
57:e6:be:6f:6c:47:09:5d:98:09:c4:ba:7b:94:0e:34:4d:00:
78:d0:ff:1e:01:b4:8c:ce:6f:5f:24:60:0e:5f:5d:e2:50:78:
9e:de:9b:14:50:e3:51:93:f2:72:b5:0c:31:5e:bc:6d:7e:48:
a6:05:2e:df:b6:e8:26:c4:2d:3a:45:05:a2:96:36:81:53:aa:
83:1e:cc:18:1d:66:64:c2:5b:73:1e:62:3b:ec:e2:77:21:f0:
ba:ad:4f:ad:8e:80:00:5b:dc:c4:ca:1c:36:84:d5:4c:28:80:
c5:b0:9f:ac:7c:86:97:7b:5c:84:9b:f3:a0:f8:bd:d9:5c:94:
67:25:1f:cd:9a:ae:8e:3f:f5:fc:1e:9f:c9:32:f0:4e:e2:76:
64:00:9a:10:8d:42:8a:e5:e9:32:2c:32:7c:00:9f:33:d4:90:
eb:b4:69:3c:c7:cb:4b:c5:50:b5:c0:ed:52:3a:85:70:8c:e6:
db:18:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:50:16 2026 by rpki-client