Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: kUEvQKmQRIefgstFeoCo/L2XkiKfCALoDzkzdrTAu8Y=
Subject key identifier: 7A:0B:7C:71:E5:F5:35:41:93:A1:4E:F9:D6:B4:F8:1C:34:D0:F0:BC
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 019D2A72DC7F4E4A43B56963028FF81D1A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 14:01:03 +0000
Manifest this update: Thu 26 Mar 2026 14:01:03 +0000
Manifest next update: Fri 27 Mar 2026 14:01:03 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: UJMr6wIlCpmIRmViQZl19fV3U7SRTMTPaZQZD6VBLoQ=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:dc:7f:4e:4a:43:b5:69:63:02:8f:f8:1d:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Mar 26 14:01:03 2026 GMT
Not After : Mar 27 14:01:03 2026 GMT
Subject: CN=7a0b7c71e5f5354193a14ef9d6b4f81c34d0f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:62:63:63:11:66:41:ca:b7:c4:e5:79:3b:
f4:93:61:1d:17:60:3e:b2:ef:d3:e8:d7:9e:82:98:
5e:dd:1f:ec:e1:e3:a5:16:93:34:6f:03:42:21:dc:
2e:60:74:2b:76:b7:4e:41:ad:e9:d7:11:1a:1e:57:
d0:c7:6c:fe:24:14:4c:d5:58:eb:4d:41:24:44:69:
9e:cf:c8:9e:30:a9:ca:67:a9:b0:6e:bb:0e:fa:ed:
53:23:fe:b2:7b:33:23:8d:70:0e:12:81:db:9f:bb:
97:24:9e:a0:f2:e2:62:36:01:4a:d7:59:95:ca:4c:
ba:aa:77:6c:bd:17:15:12:87:f6:98:33:43:cc:4c:
dd:49:8c:75:c0:1e:3c:c5:0b:d8:32:86:47:bc:d4:
39:cb:75:14:62:a4:89:8e:eb:ba:e8:cf:b3:a3:7f:
af:eb:51:be:da:34:46:da:b1:6b:25:53:ec:cd:ed:
e7:d8:cd:a5:b4:d5:93:c0:c4:50:32:a5:7b:70:4c:
e4:ae:51:11:ea:88:bc:e1:0b:49:ea:ef:42:b0:a9:
a6:6b:67:bd:7e:f3:a8:d6:47:ce:33:3b:91:38:10:
ea:e7:56:fe:7a:0a:9c:a3:d6:03:42:9b:20:b7:e2:
ca:48:1e:b7:97:64:47:c9:8e:3b:96:ce:4c:e0:9c:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:7C:71:E5:F5:35:41:93:A1:4E:F9:D6:B4:F8:1C:34:D0:F0:BC
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:e4:ab:cd:91:4d:93:51:2d:e4:74:ad:c6:8a:32:81:d6:
93:77:cf:16:f5:ea:b4:b8:0e:11:16:d5:38:4d:9c:37:43:23:
40:53:3b:77:74:68:5e:6b:9b:fe:cb:00:80:d8:b6:1d:27:98:
eb:f3:8d:8e:1c:66:63:c4:bb:f9:13:c9:2b:34:f4:95:ba:e0:
0b:fe:53:8e:f0:e4:ab:74:0a:d0:59:b8:b1:80:13:44:62:d6:
6d:a4:ad:db:c4:d6:59:a6:6c:28:41:18:48:de:64:7a:85:a2:
72:fe:76:2e:78:ab:3e:e7:dd:f8:23:b1:7d:2a:8e:36:43:52:
0b:04:d5:dc:a1:83:08:d4:5e:e7:89:24:72:20:68:31:5b:75:
5d:13:60:87:85:10:19:2a:88:87:85:7d:32:7f:4e:09:ef:26:
fe:23:da:97:5d:84:a9:cf:8c:ae:ee:c6:d4:15:8a:37:02:46:
53:bc:05:56:19:de:c3:7e:91:52:8c:07:36:55:74:02:70:d2:
2e:e4:40:7e:96:9f:59:2d:92:1c:b3:2b:9a:07:99:83:ae:98:
6d:ee:71:07:80:64:87:cd:af:cb:e6:52:4d:68:0c:73:84:d5:
1b:13:85:65:69:25:b6:3c:6a:09:e2:40:bc:f7:fc:4a:40:89:
50:47:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:36 2026 by rpki-client