Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: k887ElcYh73SnKBed0yHsDNcX9n4tg8VULJ9fY4lyJI=
Subject key identifier: A8:8F:BD:91:3C:D4:3F:27:DD:66:5E:3A:BA:13:AE:15:90:09:8B:A5
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019D288481A915185BDAFD8767A26A7528DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 0830
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: NChzE2rF14rFG9BWrJrhCS6JTtDXHbAgtxZUAnSMWlc=)
2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:81:a9:15:18:5b:da:fd:87:67:a2:6a:75:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=a88fbd913cd43f27dd665e3aba13ae1590098ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:f0:7a:af:cb:48:c0:b0:11:23:ac:76:c9:
32:6d:f1:d8:16:96:e9:50:fa:d5:40:d8:29:90:fb:
31:e3:64:c8:7f:ca:71:17:32:33:bf:e7:17:df:e1:
a4:5f:e5:ee:0e:6d:e2:60:2e:c0:54:76:cb:6f:ad:
c9:e1:5a:73:8b:82:c2:67:4b:97:d4:65:bd:c4:b4:
8f:14:27:6f:75:88:7e:42:9c:5c:76:3f:ff:48:8b:
1f:a6:45:ab:c0:80:f0:c0:5a:3a:1e:1d:18:e8:ba:
37:14:fc:23:e8:f7:e8:9f:51:f9:00:e6:74:36:22:
80:55:f4:7b:75:1a:2f:69:81:a7:89:a1:63:ff:f0:
b1:54:87:da:63:ab:3f:a9:39:f1:94:09:de:67:17:
a0:28:2e:e2:4b:e4:88:43:b7:78:36:b1:8b:ca:a1:
9a:69:1b:00:1a:a8:f4:7c:22:91:0b:d7:97:c2:23:
78:2d:69:98:5d:ce:b7:26:c4:1d:47:6e:5f:2f:68:
6b:45:6a:71:6e:42:30:de:34:6b:7b:24:d8:2b:b3:
5b:7f:1e:01:29:fc:e0:3e:59:ff:07:ac:32:29:9e:
2f:a0:6b:e2:ca:16:54:b9:0a:e5:80:5c:c4:1a:c6:
d5:29:76:ba:99:3a:18:90:01:6b:e9:0e:f5:04:00:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:BD:91:3C:D4:3F:27:DD:66:5E:3A:BA:13:AE:15:90:09:8B:A5
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d3:ea:89:f2:80:1f:3f:7f:45:85:8c:e9:96:5f:7e:27:f3:
ad:19:88:a3:f2:85:6d:47:8e:f6:49:de:2d:ee:68:d2:86:45:
8b:bc:55:d9:f6:90:8b:34:d1:a3:42:bc:3b:04:8e:23:aa:d6:
1f:f1:fb:33:45:f9:ee:4e:c3:fe:bd:68:28:fd:e6:99:5a:ec:
56:ab:ab:58:11:b2:fc:51:24:0a:db:a7:e1:15:0d:19:d7:90:
f3:ad:83:f8:01:66:24:80:e9:aa:e7:cc:4b:b5:7b:a1:2d:62:
3a:b3:10:92:65:69:54:8c:7d:54:ae:77:fc:c9:f1:08:16:71:
e3:5d:99:52:5a:95:65:93:46:e1:90:8f:3e:75:e6:69:ef:05:
f0:36:56:c3:5c:5c:78:3b:67:3b:05:ab:62:ae:ee:6e:21:b9:
52:e5:25:e6:21:5e:30:d8:ef:e7:ad:58:f1:55:ea:8c:8b:a3:
33:65:af:e5:6c:cb:89:02:2d:aa:26:1d:3b:fc:ad:ca:d0:da:
09:a1:a3:e8:ac:48:78:51:23:5f:19:7e:a9:ca:7b:87:29:46:
d5:7e:af:29:55:fe:80:48:b9:55:3b:0b:ee:22:79:43:72:b1:
a2:f7:1e:d6:95:87:52:b4:a8:f1:dc:6e:0b:52:fd:b7:ed:62:
93:e2:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:23 2026 by rpki-client