Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: cOMiHDTEdJ4us939BltX0g0RSzILusW71U26Z+SUavY=
Subject key identifier: CC:79:56:59:DC:E6:44:87:44:CA:61:3F:2A:DD:3C:47:7C:1D:8C:EA
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019D2C2A41EF419F8D779255C6BDB118CC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 126F
Signing time: Thu 26 Mar 2026 22:01:00 +0000
Manifest this update: Thu 26 Mar 2026 22:01:00 +0000
Manifest next update: Fri 27 Mar 2026 22:01:00 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: oWWE38NYJ5vFqBfm6yCUCeKQrwtSgl7P0qXXsRn/Qao=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:41:ef:41:9f:8d:77:92:55:c6:bd:b1:18:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Mar 26 22:01:00 2026 GMT
Not After : Mar 27 22:01:00 2026 GMT
Subject: CN=cc795659dce6448744ca613f2add3c477c1d8cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:9b:2c:68:40:35:e0:41:6e:3d:bd:e8:a6:
c6:88:57:2e:77:79:bf:5e:6a:dd:0d:5a:1b:15:08:
67:b0:e8:b5:e7:6b:70:9d:f6:66:7a:ac:16:96:66:
6f:96:59:71:1c:90:07:cf:98:24:e3:24:82:49:7c:
ab:35:54:7b:e1:73:59:54:40:7f:44:0c:96:f3:1f:
80:76:d8:6d:9d:5c:bd:f6:86:57:72:9d:6f:96:71:
a8:ae:5b:e6:28:c9:3d:d6:a8:e5:00:22:07:08:33:
fd:08:86:33:d3:8f:6b:7f:b9:07:4f:9c:a0:27:25:
17:30:d0:1a:58:27:d9:bf:6d:6b:66:82:15:ae:d6:
73:68:3c:c5:52:9c:f4:8e:c5:04:77:ce:96:c7:75:
dd:db:ca:e0:af:03:11:92:f1:54:c4:5b:45:a1:21:
69:b3:cc:d3:d4:31:50:ce:e3:59:ae:89:59:77:10:
8e:35:54:77:88:0e:77:e6:07:2d:9e:43:68:b7:2e:
57:29:1e:03:68:57:d1:6e:a2:75:86:39:bb:26:1a:
6c:aa:66:81:da:95:62:63:60:47:8e:c0:f9:3e:66:
52:3c:da:ee:20:1d:5b:37:0c:7f:a4:01:2f:cd:fe:
e7:4a:ae:6f:e8:ca:09:c7:44:fd:69:d0:ba:ea:b0:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:56:59:DC:E6:44:87:44:CA:61:3F:2A:DD:3C:47:7C:1D:8C:EA
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:5e:b4:ef:e5:20:3e:3b:81:7e:a3:64:f3:d0:98:63:d3:
23:8e:ab:a8:21:ed:aa:9c:7b:df:da:0e:b6:c6:29:77:ad:6e:
d1:23:fe:76:10:15:a9:41:35:14:45:17:c5:b7:ce:3f:0d:e2:
21:0f:aa:b8:62:bd:48:ce:c4:a6:4d:cf:75:e4:d0:d8:b0:26:
0d:b6:55:1e:b4:3a:f9:9c:96:78:59:f9:9f:0b:45:90:91:91:
b6:a2:8c:e2:a3:33:29:d3:91:58:4b:96:89:a0:56:e2:90:f1:
c5:83:9c:d9:5b:84:25:e1:59:9b:e2:8f:7e:a3:b1:79:9a:dd:
a7:0a:3e:b4:ea:62:4f:61:99:42:4c:63:e2:ef:48:b5:3f:6a:
f3:3b:96:70:d6:49:24:d9:cd:51:ea:62:e4:78:66:04:a8:18:
57:5c:bc:b1:a5:68:d5:d7:83:6d:30:9b:3c:11:ee:88:17:b4:
98:e6:c2:4e:57:92:58:88:bd:88:12:d4:48:80:63:a6:2e:0e:
21:25:a4:41:f3:3d:cc:0f:49:a7:65:44:f7:cd:6d:15:7d:71:
d4:7d:cf:b1:f4:62:e1:2b:39:09:bc:7b:e3:4c:e5:b9:a6:15:
31:93:47:6d:99:b2:83:ff:52:58:21:de:54:ec:75:d3:10:e1:
4b:00:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:55 2026 by rpki-client