Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: wb5eAGB3VzayuKHhcLEw9G/BCcgy86ZUVFsQ8GQZzwc=
Subject key identifier: B0:1C:63:F2:4A:9C:BB:74:9E:34:6F:48:C1:E5:26:58:D4:16:1F:8C
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019D25F11E4E6FFE03927AC0CBD7D8321F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 17:00:51 +0000
Manifest this update: Wed 25 Mar 2026 17:00:51 +0000
Manifest next update: Thu 26 Mar 2026 17:00:51 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: PKOPpJArOdolsobbGMLHvieHF16JXEwRO0VbJII60pg=)
2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1e:4e:6f:fe:03:92:7a:c0:cb:d7:d8:32:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Mar 25 17:00:51 2026 GMT
Not After : Mar 26 17:00:51 2026 GMT
Subject: CN=b01c63f24a9cbb749e346f48c1e52658d4161f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:cd:2a:62:d1:4b:6a:c9:64:c8:ce:08:24:
46:5a:84:66:8f:71:81:4b:a9:74:7a:51:89:e3:56:
24:20:be:31:28:e2:ba:09:97:81:d0:9c:06:78:f3:
33:f4:0a:e2:66:4d:df:71:08:47:e9:86:12:fa:c7:
fb:88:e3:5a:f8:1e:d9:c2:0e:c2:c0:13:b5:4d:2a:
7e:89:e4:24:e1:bf:44:68:0e:60:b9:58:ca:be:a3:
8d:ee:21:ec:f3:d9:7d:77:89:e5:9c:4e:ed:37:87:
f6:e1:09:03:78:1d:cc:7c:a8:be:db:03:63:40:e9:
a9:56:14:e8:56:4d:fa:2d:e2:4a:4c:8d:68:e0:95:
3f:c9:33:76:ac:ec:6e:a6:d8:f4:68:98:24:5d:6b:
2e:17:aa:27:2b:1c:11:3b:27:79:93:96:a7:73:8c:
46:f8:bc:6c:2c:1f:45:06:e4:c1:a1:f4:17:3d:de:
df:00:0e:88:89:e6:d5:55:50:d9:4f:ac:10:fd:d9:
94:77:4c:a7:8c:76:53:8d:95:08:fb:7d:14:43:27:
2a:bc:c2:12:f9:7e:a8:a9:8b:be:fa:c8:13:d2:7f:
32:fa:41:b5:08:c4:0c:14:65:28:ad:cd:a1:8c:d7:
b0:a8:77:e5:ec:b0:e3:d9:3c:2c:67:4f:a8:b3:1f:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1C:63:F2:4A:9C:BB:74:9E:34:6F:48:C1:E5:26:58:D4:16:1F:8C
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ff:92:c5:6b:c4:d4:0f:c0:4d:29:64:83:d8:3c:0d:41:ce:
db:46:e1:04:23:e9:5a:61:d9:84:e0:8f:92:1e:1a:43:b0:28:
4c:1c:7c:16:8f:4c:23:de:ca:43:08:2f:91:a4:3b:49:f8:00:
cd:39:38:0a:56:e7:1f:92:11:25:08:6f:ac:e7:f4:9a:e8:1d:
b3:23:e3:55:d3:ca:a4:82:91:76:2b:05:37:27:19:58:e4:c5:
7a:37:97:d8:12:80:11:cc:41:56:20:87:99:64:df:85:34:e8:
e1:fb:7c:ab:38:8f:a3:13:e8:dc:08:68:50:68:ee:45:a1:11:
87:d4:1c:c8:50:fd:f1:65:44:8c:73:f2:db:2e:97:8b:56:c2:
c3:3f:74:c9:8f:2a:44:29:59:b3:ed:8c:62:3e:5e:2c:95:93:
64:0c:fc:ae:84:0b:1b:b2:21:d4:06:e5:20:ca:0a:3a:e8:a3:
bc:56:c7:74:b4:93:d8:df:25:ec:7c:97:6d:55:59:6a:c5:a7:
c2:34:83:85:55:39:9e:b5:7f:9f:06:65:d8:90:5c:fd:84:41:
61:99:c3:68:2a:3c:28:a2:13:8e:08:a6:ec:6a:53:61:d6:d4:
86:42:a9:e8:2c:18:62:77:fd:9a:cb:5b:5f:51:76:f0:c5:f0:
bb:9d:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:59 2026 by rpki-client