Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: Xo11yxlsJkAZfcr8mktgA0MGf/j11a9wAkOaGVIxKyw=
Subject key identifier: 8D:70:6D:C6:BD:05:F0:E9:A0:75:FE:4D:C0:CB:6D:A1:E7:22:17:59
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019D2AA9598422F4B357E5F71B1A7FA599C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:34 +0000
Manifest this update: Thu 26 Mar 2026 15:00:34 +0000
Manifest next update: Fri 27 Mar 2026 15:00:34 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: C//f6qFlz+a2MiH8KGBuHCcw60p4k2HN/8IeZDkWXvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:59:84:22:f4:b3:57:e5:f7:1b:1a:7f:a5:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Mar 26 15:00:34 2026 GMT
Not After : Mar 27 15:00:34 2026 GMT
Subject: CN=8d706dc6bd05f0e9a075fe4dc0cb6da1e7221759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:c7:3c:e6:dd:9b:4a:dc:1d:c2:93:5a:c3:
6e:45:53:37:ca:09:94:66:e5:1c:3a:ca:3a:20:00:
25:8a:db:b6:6f:64:eb:25:36:e6:c1:40:86:de:8b:
35:f5:ee:a4:06:11:64:69:e5:79:50:99:7e:e4:05:
d5:80:e4:3c:cb:69:6a:ab:3a:b9:6c:05:91:98:57:
3a:78:ee:53:15:f7:ce:1b:24:8d:98:c9:9f:bb:a1:
08:06:2d:40:c7:ce:00:8e:95:25:74:5b:4d:b4:59:
ff:d7:c0:ba:01:5b:74:90:d1:1f:68:14:a3:05:d1:
7f:5e:19:02:ef:5f:ef:c2:42:f3:a7:f7:d5:1f:77:
94:4a:fd:f0:ca:49:fd:d0:cf:74:02:fa:8c:89:77:
5c:68:83:43:50:5e:51:bb:56:76:95:db:36:6a:2d:
26:e8:39:db:16:f4:7d:de:c7:a1:46:e7:c8:bd:c1:
23:19:0d:15:8a:ba:9c:70:f4:94:b1:65:cb:95:cf:
10:6b:6f:b9:da:30:d8:49:ac:f3:3f:09:55:da:b2:
9f:5d:09:e1:99:57:c8:e4:2b:82:5a:8f:53:93:23:
bb:9c:02:32:66:a9:e4:24:f0:00:4d:e7:21:1b:a5:
6e:05:02:33:d2:fa:99:9c:96:25:43:07:60:4e:8e:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:6D:C6:BD:05:F0:E9:A0:75:FE:4D:C0:CB:6D:A1:E7:22:17:59
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4f:68:81:9e:ee:8f:eb:e9:a9:6c:2c:1e:6e:60:82:cd:e8:
fa:5a:25:09:c4:41:dc:a0:92:c1:00:05:48:10:e4:d7:e6:74:
63:5b:45:5f:8e:99:56:68:97:c7:f1:3d:95:df:98:75:06:ff:
ab:cb:0f:9c:20:81:88:5b:89:96:b0:9d:3c:20:a5:b0:7b:d9:
d6:1d:1d:38:9f:7b:58:7c:c4:3a:03:3e:f6:44:f2:8b:86:9c:
89:1f:e5:ca:61:59:26:96:21:20:5a:70:eb:1c:25:65:d2:e3:
30:a1:1c:03:5e:0c:fb:8e:c4:53:de:36:67:bf:fa:4a:00:84:
32:d6:c8:9c:7f:ff:68:11:ab:a5:05:f7:8a:5b:61:c4:29:5e:
14:fb:63:7e:89:81:a7:da:48:b9:4f:6f:a4:96:79:36:b1:eb:
59:4a:77:ea:0f:df:a5:15:c5:b6:e3:57:6d:a2:d0:8e:36:72:
c5:1c:3a:9d:97:f6:30:8f:a0:f9:15:ba:4d:af:47:ed:3c:4f:
e9:ab:78:45:3f:0b:2b:e5:57:98:a0:1a:64:d6:30:f3:0e:94:
94:24:24:60:d8:71:82:df:5a:47:50:cb:8a:68:a6:22:bd:bd:
36:73:2b:f8:84:80:f9:d6:24:cf:98:5f:ee:3c:82:6f:ef:31:
22:1f:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:36 2026 by rpki-client