Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: rMaW0yH9zt8J+y4jzsKfAIokflhyDWyMjVZjvlcmZ5U=
Subject key identifier: 8E:89:8B:C1:F0:E1:63:37:23:D6:54:71:30:0B:7A:0E:E7:4E:7E:26
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019D284D68F81AFCA0DF1F9DEC921D211EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 36
Signing time: Thu 26 Mar 2026 04:00:54 +0000
Manifest this update: Thu 26 Mar 2026 04:00:54 +0000
Manifest next update: Fri 27 Mar 2026 04:00:54 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: Jcpwae4j+51B39AbwZ080Zy3uuxZOFd3kg5SbK9Ui00=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:68:f8:1a:fc:a0:df:1f:9d:ec:92:1d:21:1e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Mar 26 04:00:54 2026 GMT
Not After : Mar 27 04:00:54 2026 GMT
Subject: CN=8e898bc1f0e1633723d65471300b7a0ee74e7e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:16:da:c7:14:71:c6:96:f4:5e:8b:f4:a1:
2c:6a:d7:19:a7:07:ef:65:ed:53:68:67:45:8c:9f:
b0:6d:ee:24:ab:ac:cd:3d:14:8c:e8:ed:95:73:a0:
87:05:c6:6b:a1:5b:78:24:f0:1b:4f:a6:86:5b:19:
82:d8:4b:22:ff:21:bc:bb:59:2c:28:28:6b:24:cb:
43:e7:fd:fe:bd:66:8b:9f:18:09:53:9d:bf:c3:33:
48:6e:58:db:55:c3:6a:96:1c:ae:54:68:92:17:5f:
cd:b5:fb:64:94:d7:7e:59:5a:8c:94:2b:5a:21:2a:
05:f4:b6:e1:00:17:0d:4c:74:f2:c5:17:3e:16:30:
30:08:27:c5:36:bf:7a:e7:b1:e0:73:7b:41:b2:b5:
f4:0b:fe:b3:53:01:80:54:88:50:4d:47:75:20:79:
35:f5:72:b9:a8:94:34:22:ce:5c:c9:54:d4:a0:d5:
18:5f:b6:8a:f1:af:d8:fc:88:88:23:bd:45:27:63:
2b:5f:24:0f:9a:b1:fc:13:e5:f9:e5:a5:eb:95:22:
e8:ae:f9:d2:a1:d3:0c:d8:c2:a2:65:f8:09:7f:7b:
34:b0:c6:1b:8e:3b:95:ef:83:f4:1d:f7:fa:4e:3f:
10:e1:7c:50:0c:9b:30:42:7d:5c:d0:7d:b2:46:1c:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:8B:C1:F0:E1:63:37:23:D6:54:71:30:0B:7A:0E:E7:4E:7E:26
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:18:17:f3:a8:36:f9:07:37:f9:21:9f:85:0e:d0:1d:fa:
3b:09:ac:31:8d:7d:66:5e:a5:55:ff:8d:33:3a:d0:48:38:6a:
4a:99:17:44:1f:7f:b4:1f:ba:ff:f7:38:a9:c0:ba:4e:66:3c:
12:c2:e2:50:7e:85:d8:38:98:ba:97:f3:01:7e:ce:3f:42:38:
67:54:e4:54:52:23:d6:0e:63:53:4b:6a:35:ab:bf:a5:bb:c7:
7d:5f:b5:21:ff:1a:27:b9:63:d2:e2:8e:69:27:4c:d3:ad:9e:
ea:f9:5c:45:f5:f2:d7:c1:cd:61:dd:ad:32:cb:01:0a:3b:2c:
32:10:f6:14:96:09:68:4d:e3:9c:3b:98:b5:27:18:07:2a:a7:
05:c6:8f:97:4d:54:e3:1d:9e:cd:5d:89:f3:b4:c6:8f:32:de:
7a:ee:ec:04:6f:89:2f:3b:e8:b1:35:92:db:1e:72:45:1f:a6:
be:5b:09:f2:e7:04:a9:b3:b5:b4:4f:18:6f:62:3b:f3:38:9d:
4c:9a:32:0c:41:37:63:3f:78:3c:6f:a2:c2:6d:2d:96:ea:83:
c9:6a:d9:a5:c4:b5:eb:a6:21:f4:50:2f:1f:d6:2d:c3:e8:8f:
d9:af:6e:f6:c5:d2:a3:fc:d0:80:37:e2:c5:79:7a:0e:7c:8a:
af:27:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:55 2026 by rpki-client