Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: AmmCE2iLeyXPWiUOrGSVjUqNomwQfAp4Wb6dpbi3Hdo=
Subject key identifier: 39:3A:16:EC:7B:28:BF:38:59:C3:78:8A:B8:51:6A:B2:71:6B:3A:DC
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019D2704B691D2FCC951A5DAF625F21EF0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 6E
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: SshAxpBOXy85f+jDNtZNZo55pfTfVTk6IcvVFGx6JlY=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b6:91:d2:fc:c9:51:a5:da:f6:25:f2:1e:f0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=393a16ec7b28bf3859c3788ab8516ab2716b3adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:7a:cc:93:d4:22:74:95:79:be:21:e9:90:
8a:a2:46:83:c9:97:ef:69:2e:0a:a7:d4:3b:70:bd:
d2:2d:a2:3d:2b:55:9a:6d:4b:02:c7:2e:67:6b:90:
7d:44:df:c7:54:e3:4f:29:4b:b6:2d:01:41:1d:e6:
08:c4:4f:ef:75:ac:83:81:63:28:5a:33:68:f8:86:
ce:39:6f:a6:21:b8:18:a3:a5:9e:2e:f1:ca:8a:73:
84:4a:5b:7c:31:ae:3f:2a:f4:96:99:64:3a:84:d2:
2b:0a:90:d2:c9:e4:05:f8:70:07:b7:ed:14:5e:20:
e2:a1:5e:79:a0:9c:9a:07:17:c3:4e:3e:fe:6f:54:
57:6b:fd:28:a4:1a:43:f1:cb:ef:e2:72:ca:da:a5:
e2:a9:b5:53:57:b9:e7:97:75:33:cf:f3:24:fa:51:
de:ab:70:a5:c3:11:ee:56:80:f1:96:cb:2d:d8:44:
a9:50:58:9d:08:9f:d9:2e:90:88:03:f4:1c:a9:51:
e7:76:aa:c8:cc:43:d7:e5:46:97:d4:38:3a:e6:6b:
96:3b:46:d1:b0:70:4b:ea:dc:b3:4f:49:e2:fc:bc:
2c:9d:c4:f4:74:cf:8d:5d:45:e7:9c:4f:bc:d0:aa:
2f:c4:4a:1c:46:c5:91:7e:8f:65:6a:b9:17:2f:0c:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:16:EC:7B:28:BF:38:59:C3:78:8A:B8:51:6A:B2:71:6B:3A:DC
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:70:12:09:95:b4:71:39:5e:74:1d:b5:6b:dc:af:df:75:
b6:e7:df:11:16:61:c0:40:58:bb:0c:d0:50:d9:a2:4f:26:30:
e1:e7:3c:56:d3:8f:64:f1:a5:9a:c2:09:fc:a2:7e:07:36:fc:
dc:c9:58:70:3f:83:a4:f4:cb:5d:ed:5b:c9:0b:c4:96:e5:11:
5c:75:3b:4d:f3:70:0c:d2:1e:ee:2b:4b:b8:b3:71:de:2f:11:
3b:4b:89:8c:41:2e:bd:f1:a6:5c:84:05:36:a6:ea:24:a6:43:
79:37:22:f1:12:07:37:ba:57:8c:78:34:17:26:23:cf:d2:89:
9f:9f:55:a7:92:47:f4:57:89:86:1c:55:3c:3d:4b:5d:df:05:
68:24:0e:7a:ae:17:12:9d:c9:3f:6b:d6:a5:23:87:28:d2:0b:
e4:93:c3:ce:58:8a:b4:2e:e9:e9:74:c2:45:19:fd:82:ef:7a:
7a:10:72:03:2d:01:dd:6f:21:17:78:5f:61:1a:ad:3f:98:1a:
8b:42:d9:1c:f3:11:34:e7:f1:8c:a9:58:1d:30:09:e4:03:4a:
7a:05:c4:c5:5a:b6:bd:1c:dd:23:4b:a4:71:7f:35:9b:7b:61:
25:d7:68:79:b0:24:77:eb:11:92:d6:44:70:02:66:87:3a:3d:
80:c5:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:06 2026 by rpki-client