Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: 68kJJ+ZGtj2l8fId8KiIAh22IYwa9oPUuse1glUBXXc=
Subject key identifier: BC:8D:47:12:E9:89:38:A3:94:43:44:53:50:28:C8:03:93:B5:F9:0F
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019D2960C14F65493DECE4514718656BDCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 02AC
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: nLpjxVcxrL2tIHsAF90ZJTghOMh6a8ArQGZe5hRrbuw=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c1:4f:65:49:3d:ec:e4:51:47:18:65:6b:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=bc8d4712e98938a3944344535028c80393b5f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:81:27:60:df:94:39:b3:bb:b8:d4:29:56:
12:ec:84:ac:61:6e:82:4a:1d:3a:0a:37:a2:33:b6:
4d:db:8b:77:e5:69:bc:d6:2b:55:88:f4:57:8a:c9:
6c:d9:f9:1d:8a:36:48:09:f6:39:89:c1:12:9d:38:
1e:4e:c7:8d:12:2e:0a:d8:15:8e:a6:f5:50:5a:a2:
fa:b5:2a:92:d9:55:78:6f:80:4d:50:df:dc:e2:8a:
16:83:93:94:68:56:f6:31:1b:31:93:a8:3b:ab:81:
6d:67:30:6a:1f:19:9d:86:c8:c7:a1:5f:b1:29:16:
41:97:f1:85:15:a5:89:0d:bf:fa:de:59:f7:e1:1e:
43:48:a4:92:f5:d1:57:59:6b:81:83:2b:d4:80:59:
5f:4e:84:e3:f6:72:ab:89:cb:51:29:58:d8:ac:f3:
61:d4:37:15:6c:67:9f:6b:ec:ab:16:dd:c9:10:10:
3f:3e:a1:11:ba:f9:a8:c1:4e:1e:df:9d:48:64:0f:
f8:7e:2d:ae:85:4c:fb:de:3d:c8:35:8f:7a:69:15:
fe:a0:ab:ea:92:3e:df:49:dd:ab:00:f4:2c:2b:3a:
70:c2:97:99:4c:8d:0d:57:d1:73:a8:63:57:bb:6e:
11:d0:ee:0b:7f:a5:85:20:83:4a:f6:23:05:18:11:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:47:12:E9:89:38:A3:94:43:44:53:50:28:C8:03:93:B5:F9:0F
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e7:3d:1f:2f:51:39:d8:6a:6a:04:73:3b:8f:20:4a:ae:c0:
d0:ae:e8:41:c9:cc:db:9b:52:78:d8:ce:94:74:53:5e:19:68:
fa:6a:e5:ae:01:c0:cd:81:ca:34:f1:6a:13:ef:56:4f:d9:4d:
3b:0a:50:79:41:80:e8:7b:8d:0d:fd:f5:b8:4e:0e:fe:d0:ba:
fe:0c:2f:f3:1c:a2:1d:69:55:39:cf:77:3d:fc:eb:ac:e3:60:
54:ae:ee:b0:f4:1c:0a:04:e4:6c:9f:1b:65:7c:08:4f:30:b2:
2c:04:5f:8a:c5:f6:70:c9:d4:60:19:b7:b9:3d:27:57:be:79:
76:8d:dd:24:5e:15:77:ef:43:2a:cc:2b:0e:46:7f:48:82:ed:
a8:65:21:fa:0e:1e:75:c4:47:11:31:9d:4f:8e:fa:34:7b:83:
94:95:c2:6f:53:8d:c5:0e:a9:ea:64:0d:08:0e:43:e1:04:4c:
02:1d:f4:62:2b:b7:d6:0c:6e:6f:52:02:33:4f:eb:d5:3d:3d:
b0:e3:d4:c7:cd:f1:27:1f:87:34:e5:d0:44:0a:ac:52:83:f8:
95:1a:48:c3:7d:a4:11:9c:02:e6:52:62:be:fd:76:4d:26:10:
31:4a:71:4a:ae:fd:16:dd:d9:3c:17:b7:18:34:7b:7b:1f:96:
ab:c8:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:30 2026 by rpki-client