Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: Z2NkTioDe95kkxDNZ5D9qN1Kkw4WQzuyNk2rQHJ1xEo=
Subject key identifier: DB:75:09:DB:DE:3B:E6:61:A8:11:67:F9:D1:AE:71:63:8E:D3:87:AD
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019D2703D4D88AA868B3ECD1E99070D671F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 057E
Signing time: Wed 25 Mar 2026 22:00:55 +0000
Manifest this update: Wed 25 Mar 2026 22:00:55 +0000
Manifest next update: Thu 26 Mar 2026 22:00:55 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: 49Gxr4VqasetrLxJEu3CSmk2nCY4bB6YTlg9+bF1Ftw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d4:d8:8a:a8:68:b3:ec:d1:e9:90:70:d6:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Mar 25 22:00:55 2026 GMT
Not After : Mar 26 22:00:55 2026 GMT
Subject: CN=db7509dbde3be661a81167f9d1ae71638ed387ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:15:db:16:25:52:00:13:cb:e4:84:37:8b:
b5:ce:2c:22:de:5e:f5:91:a4:b1:92:ee:d1:af:dc:
3d:49:f7:d7:5a:46:d5:2c:43:f7:4f:55:35:9f:91:
c5:50:8b:97:c2:e7:0d:b7:a5:4d:aa:68:2a:a4:27:
26:f3:59:14:ef:3a:45:42:b6:0a:16:8c:6d:b2:b2:
83:cc:dd:ce:93:f8:80:b2:25:38:ca:35:53:fd:ec:
c1:43:db:51:b4:62:b6:49:4e:e2:a2:3d:84:2f:84:
a1:36:86:b9:bd:dc:0a:9a:25:43:76:27:6f:7c:06:
43:53:49:20:df:5c:9e:f2:9f:0a:9e:1a:b0:ef:f7:
a0:94:d3:e4:91:ad:b6:ed:54:51:18:3b:68:cb:c3:
74:76:9f:c0:c8:cd:87:3c:b6:72:85:e1:c8:ed:7d:
a0:78:84:f7:99:c5:95:87:8d:85:1e:38:21:09:47:
ab:68:54:29:5d:83:a1:b7:f5:c3:c8:52:51:14:59:
c3:85:6b:19:67:b4:38:0a:57:0a:4a:8c:9a:3b:ed:
a0:70:13:58:29:58:f7:c8:5c:4d:6d:66:5b:7b:f2:
71:d3:8e:88:2b:cc:c5:96:4b:e8:b2:57:f9:36:6a:
c3:4f:cd:1a:4f:a6:a8:e9:e3:3e:2e:bc:55:b7:75:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:09:DB:DE:3B:E6:61:A8:11:67:F9:D1:AE:71:63:8E:D3:87:AD
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:04:05:4b:34:a9:2c:8a:32:74:3e:ce:ff:5c:cf:c3:ee:2f:
3e:d9:e3:8e:5d:88:6b:e7:f1:ee:f3:71:3d:65:7e:5d:d3:08:
bc:bd:b1:15:0d:34:3c:4a:38:86:71:a4:d1:22:f7:d7:95:35:
11:65:52:a7:76:24:50:5a:2b:9d:4b:05:5e:ae:ab:0c:c9:2b:
52:40:8c:6c:51:e0:8d:7e:97:1e:b9:81:3c:b6:15:bd:ba:4b:
4e:c5:7f:72:e1:5f:dc:91:2d:f8:07:26:79:28:50:5d:8d:44:
a5:e0:f4:e0:e3:3e:6b:cd:b7:d3:3a:5b:ac:aa:6c:a9:27:bf:
e7:d4:7b:bc:fd:75:d1:bb:c8:87:6f:be:fe:51:9f:6c:4d:72:
45:95:f4:c7:8e:5d:0e:a5:ad:08:c1:10:0e:d3:f1:a3:6a:c9:
70:f6:0b:57:d8:c5:0c:8f:a1:14:f0:c5:7a:48:b2:18:1f:2c:
a3:ee:4b:93:ab:ab:db:4b:68:78:a5:2c:ab:05:14:64:81:41:
fc:04:2a:fd:36:83:41:34:fa:5e:db:16:66:77:6a:b7:86:7c:
43:6f:7c:9f:95:2b:31:3f:80:40:7c:a3:ea:e8:9d:e9:a6:9c:
e7:32:9e:48:56:a5:eb:59:82:57:de:0d:43:e4:cf:a3:85:4f:
a6:12:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:35 2026 by rpki-client