Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json)
Hash identifier: uHM6DdBoqJMmysjzc682nhv4yunJ8J6+fC62gYI7PEk=
Subject key identifier: 09:1D:8C:F8:6D:6A:75:DB:DD:B2:16:C7:76:A5:25:D7:1B:38:CE:E4
Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419
Certificate serial: 019D25844AFFA527048E9AF643DCF30185C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
Manifest number: 115E
Signing time: Wed 25 Mar 2026 15:02:00 +0000
Manifest this update: Wed 25 Mar 2026 15:02:00 +0000
Manifest next update: Thu 26 Mar 2026 15:02:00 +0000
Files and hashes: 1: 6I-7kIsmNEbjqpaRLZFYHSiX3Cg.roa (hash: l5DJjaa9jBabVc2gTKAmahVVwUkclCV/KKoXuPERh3I=)
2: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: QArHE2bmULij0mfZvlfsw2zuf1AXeoiAo1vXZdULQAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:4a:ff:a5:27:04:8e:9a:f6:43:dc:f3:01:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419
Validity
Not Before: Mar 25 15:02:00 2026 GMT
Not After : Mar 26 15:02:00 2026 GMT
Subject: CN=091d8cf86d6a75dbddb216c776a525d71b38cee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:8f:27:de:f2:34:73:4d:36:2e:6c:02:66:
0a:61:53:da:43:d9:6c:ef:8a:87:6c:c9:d7:71:c5:
46:b1:c7:8d:bb:74:4c:f9:37:d9:b5:33:e8:c8:e1:
4a:5b:84:1c:0e:02:7e:f4:68:de:32:11:13:73:31:
1d:2f:87:cf:a6:b2:b3:c8:bf:a0:3c:2f:36:a2:59:
1a:ef:11:15:c1:a6:4c:24:b3:73:15:1b:02:34:e9:
dd:6a:5e:f1:5d:e1:c5:a6:53:aa:2f:7e:f2:c0:6f:
af:59:d3:17:96:34:b9:8f:0c:be:08:02:af:9b:80:
09:65:a2:89:5a:1d:68:45:43:ce:f8:67:14:05:c0:
aa:93:35:0d:bb:cb:3b:0a:be:b4:67:83:86:f4:22:
8f:1c:ae:7f:f3:70:fe:5e:f7:2d:8b:b6:7b:24:63:
da:41:42:10:60:3f:67:40:d1:75:30:8d:b2:4a:37:
fd:7a:1c:e8:9c:38:4f:e6:19:19:f2:dc:c1:48:52:
25:11:3d:ce:69:a1:d2:63:3f:3d:2a:3e:de:e3:5d:
75:bd:84:6a:b7:c0:87:5d:6a:5f:97:9b:43:5f:92:
eb:7d:22:d7:99:6f:82:31:66:aa:39:a4:06:0b:70:
a5:75:7a:f6:4e:90:1f:6d:95:c3:46:eb:ba:8f:fe:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1D:8C:F8:6D:6A:75:DB:DD:B2:16:C7:76:A5:25:D7:1B:38:CE:E4
X509v3 Authority Key Identifier:
keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:73:cd:9b:c2:39:cc:0b:3d:45:c7:d5:42:70:27:05:bc:91:
bb:ca:59:95:e0:fc:f0:38:6f:ab:17:0d:ee:65:9e:8f:36:75:
4e:f0:b0:23:88:f2:f1:a5:e7:5b:b2:95:99:36:e0:cf:5f:64:
aa:65:39:e2:4d:aa:35:8a:2c:f6:db:15:1d:81:b1:00:ba:67:
b6:50:f1:73:18:61:90:ba:19:01:bd:65:74:28:fa:3a:7b:4a:
d1:a7:34:9b:30:d1:15:6b:36:99:2a:e8:39:40:9e:20:b8:07:
41:db:c7:d3:77:49:33:62:5b:a1:40:7f:4e:56:78:55:ff:3d:
57:30:de:db:6e:a8:01:01:4e:4b:5c:20:ff:66:00:2c:21:e7:
b6:5c:86:d7:b3:8a:e3:93:8b:07:17:09:df:65:ad:85:29:f1:
36:4b:8d:e5:81:22:29:d6:8c:94:ed:01:fc:16:89:ce:5c:c4:
96:43:df:28:a6:41:a5:17:05:46:99:2d:5a:a4:84:f8:34:50:
17:10:c1:e2:a9:68:5a:36:b8:e4:8b:c3:28:70:7f:d4:d6:f9:
31:87:55:8a:a2:f5:5c:d7:65:7c:ce:d8:8e:ff:e6:a5:29:84:
d2:8c:16:1c:6f:96:59:eb:14:58:e9:9d:dc:74:99:c2:bb:d2:
5d:33:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:50 2026 by rpki-client