Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: ws1JGUWAD2fEr/UA4etrnpu8AbuT5pFpw7tBJcp30bw=
Subject key identifier: B3:F8:4C:C1:91:27:88:10:A9:BE:70:9B:8C:48:8C:84:3B:E3:B8:FB
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019D29CE115D4FD6C831123CCDA61BCE2E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 11:01:03 +0000
Manifest this update: Thu 26 Mar 2026 11:01:03 +0000
Manifest next update: Fri 27 Mar 2026 11:01:03 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: jFk00+zdOsi8AzC3ztiq1ufmp2ctCbP8QP1PZDhJFKA=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:11:5d:4f:d6:c8:31:12:3c:cd:a6:1b:ce:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Mar 26 11:01:03 2026 GMT
Not After : Mar 27 11:01:03 2026 GMT
Subject: CN=b3f84cc191278810a9be709b8c488c843be3b8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:91:95:a1:da:81:52:0d:f1:c3:6e:02:9a:
7a:f5:5e:93:ea:34:ab:ac:68:ac:36:58:47:9c:9e:
2e:0e:e9:2f:9c:e1:92:1c:fd:3b:59:11:61:87:37:
c4:ce:82:5e:97:9c:e9:84:73:b2:3d:bd:d8:78:c1:
3f:65:9e:60:12:c6:a0:21:11:a5:87:4d:c6:b7:04:
5d:24:12:e5:be:c9:71:8c:d4:03:bf:1d:44:03:b1:
df:13:14:50:6d:c8:13:2d:59:71:43:6c:a9:35:c0:
4b:f3:e8:92:41:52:57:dd:bb:35:3c:10:74:6f:a6:
7d:d3:5c:03:fb:94:ee:7a:49:78:03:6f:e7:3b:0f:
b3:67:64:8e:54:43:0b:d9:11:ee:15:17:1c:83:96:
60:ee:8f:2d:39:c3:b8:ef:99:4f:28:b2:6b:71:c8:
a6:f4:ba:6c:95:f5:92:9d:e3:cf:65:2d:3d:fe:85:
5f:c6:9e:92:63:e0:96:48:2e:5f:26:68:c4:07:05:
5b:e3:63:1e:13:97:c3:c3:db:25:6a:49:c9:fd:dd:
5e:ca:d1:22:8f:ae:db:6d:b7:9a:28:ae:88:64:b9:
bc:28:c8:a2:ef:6c:19:ed:ed:70:31:d2:0f:f5:ef:
c6:73:82:98:87:78:12:dc:46:ab:29:3c:34:01:e1:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:4C:C1:91:27:88:10:A9:BE:70:9B:8C:48:8C:84:3B:E3:B8:FB
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f6:96:cb:2c:4f:7a:de:08:f5:af:6c:da:97:64:c0:68:f5:
ee:4c:e0:c2:35:67:d7:80:07:e6:d6:5e:c6:83:b3:c8:d9:24:
ca:a4:b8:b6:cb:8c:68:bf:49:ec:6e:f8:c2:5c:55:6e:ba:da:
b2:df:33:82:57:b1:b5:99:16:30:c2:c1:c8:c1:d5:17:9f:69:
14:43:80:09:31:aa:63:22:5f:c0:f8:2b:32:47:f3:a3:4a:a9:
ab:5a:a4:90:8a:d0:9f:ae:ef:ea:6e:0f:b6:6d:9c:bd:f9:00:
c7:a7:aa:d2:f3:82:80:b6:e1:1a:2a:fd:18:51:89:77:b2:76:
8e:7d:06:62:89:bc:26:79:ec:e1:fa:00:3c:0a:b2:46:3d:36:
c2:01:31:87:6f:99:c1:ee:d0:b7:51:5e:0a:eb:d7:db:da:5c:
13:8d:ce:5f:2e:fc:7d:de:42:cb:9d:85:3e:c0:3a:a8:7f:b6:
8e:87:6f:c0:db:6f:04:e5:01:5f:9e:87:45:5e:e1:bf:88:b0:
8f:50:fb:8c:e3:7c:1b:2e:a6:d6:b8:e2:db:fe:98:88:0c:f9:
82:1b:63:53:09:8b:43:37:e6:44:0b:48:d1:99:a6:c9:07:44:
93:34:c7:fe:fa:ed:cc:f3:67:80:a9:cf:8a:04:32:74:fb:e4:
3a:e3:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:37 2026 by rpki-client