Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: WwTJWeMlNkoRHKcqqF6BopYoBYkT/77IMD6rbXEWjg8=
Subject key identifier: B5:F0:1A:70:8C:8F:79:A8:50:44:75:90:B4:9C:BC:A3:AE:9C:4D:B0
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019D2816F166CFA53A4882ED7EE71B6C0D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: siipRN7mOiKj/1dUb68kKkNT/HqRHiNERGtayqbpYNE=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f1:66:cf:a5:3a:48:82:ed:7e:e7:1b:6c:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=b5f01a708c8f79a850447590b49cbca3ae9c4db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:3a:33:bd:20:3d:d4:f8:e5:3f:e1:65:4b:
f1:18:a4:a9:2f:0d:15:d7:36:be:6b:ac:1b:38:a6:
f6:d9:22:41:d9:c5:04:78:9a:33:06:59:18:7c:e3:
9d:65:e5:0f:28:a5:7e:62:46:fd:26:8e:71:af:a9:
ec:e4:d2:a7:75:0d:31:76:da:bd:8e:ca:bb:1a:3b:
df:c1:34:34:6c:36:9b:41:d9:60:4c:b7:18:ce:2f:
20:04:38:6c:2e:f4:a1:26:81:7c:ef:1b:79:4d:af:
ef:b0:d0:39:6c:6c:e3:cf:58:79:35:73:8f:7d:eb:
33:59:2d:a5:c6:60:03:47:cf:64:c0:6c:23:46:9c:
1c:fb:5c:76:3f:8a:f5:5a:14:ce:3d:bb:c9:0a:a2:
e3:30:6f:c9:2d:70:0c:e7:f2:13:6c:68:82:0d:b8:
0c:4b:bd:f2:4c:22:ac:5c:84:94:3a:c1:84:80:26:
1e:12:99:48:1c:d6:62:5f:47:e3:50:8a:41:30:23:
47:83:f3:a2:26:1a:df:8d:90:fd:dc:fa:f8:7a:5d:
27:50:0b:5f:98:28:ef:a4:c5:a1:ee:95:a0:9d:03:
56:49:dc:70:7d:08:79:5f:33:8d:8f:05:49:76:50:
9f:10:9b:ee:2e:43:50:a1:f9:3f:5f:bc:a0:4e:85:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:1A:70:8C:8F:79:A8:50:44:75:90:B4:9C:BC:A3:AE:9C:4D:B0
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:85:d3:a9:d6:06:cf:bd:d4:a2:38:c2:bc:99:d3:14:a0:6c:
1d:0a:bb:00:ba:37:62:a2:1f:91:e7:df:b2:d8:a9:6a:b1:03:
c3:5a:c6:8f:8e:e6:23:82:bf:16:72:cd:6d:cb:22:0f:16:76:
82:47:ed:e1:d4:28:de:b6:bc:41:a4:e4:7f:5a:2c:1e:6d:09:
ab:68:b0:39:dc:05:f9:ff:f5:d0:9b:28:0e:21:ff:3f:15:67:
23:b7:bf:5b:89:61:32:06:07:c3:58:91:3d:90:e7:06:9d:88:
c9:28:30:b4:e0:87:94:a1:92:6f:2d:4d:97:63:0a:b1:e6:63:
be:18:9a:8c:35:be:2b:37:6e:70:54:9d:99:2a:7d:db:40:c9:
63:ef:56:de:bd:4f:30:66:0c:09:fc:4e:c2:cb:a5:28:23:70:
55:df:eb:44:f4:99:a1:db:fc:00:83:fc:44:a4:6d:38:04:69:
bf:ba:51:fa:12:b4:e7:dd:b0:18:a1:5d:d9:76:62:e0:b2:c8:
05:78:02:5c:77:64:ab:ac:21:78:8e:46:56:bd:14:78:39:27:
bc:64:db:06:c4:19:d1:b9:92:86:d9:1c:74:cc:d8:c8:e1:b3:
23:2c:3e:ef:dd:b6:b7:12:11:2e:a0:27:12:3f:2d:36:49:92:
28:8a:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:50 2026 by rpki-client