Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: 5oRUubfRWksH2S0jfPg7iy1RqBvhsKF1XuW3AhiDxxU=
Subject key identifier: 5A:FF:CF:C8:08:93:AF:A4:5E:D6:3F:36:15:BF:07:1D:3B:C6:10:5E
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019D2884301B056D491BD8CE0999738AD456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 0174
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: Ama+/DF3D2w6bw9m6RQZZdxyZGA0EZbKQ6Pw02egFm0=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:30:1b:05:6d:49:1b:d8:ce:09:99:73:8a:d4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=5affcfc80893afa45ed63f3615bf071d3bc6105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:31:58:b1:29:66:e3:a3:2b:6e:fa:b0:98:
98:8d:73:83:86:8b:65:15:41:0b:5c:1b:d8:1c:76:
60:8d:4a:68:8b:78:97:8d:51:3e:16:ef:e7:64:ff:
20:1d:8a:d9:ee:c4:4d:13:65:d2:c0:7d:56:4c:56:
29:64:b0:0b:ec:f5:f2:15:52:57:89:b5:c7:36:99:
32:3e:bd:77:29:bb:a9:be:eb:b7:f8:70:d9:9b:78:
58:b7:7a:8d:a5:66:fa:8f:3d:00:48:03:00:89:c6:
31:c2:87:e7:27:40:80:40:b8:7e:d4:12:c7:6d:35:
31:f6:f7:4a:c7:42:73:0d:31:a5:d8:17:d2:cc:ce:
c7:ab:3a:e7:56:c8:6b:bc:f7:7f:8f:21:77:e5:d0:
df:95:00:21:71:f7:be:f3:c5:41:8c:c6:5b:ca:0b:
c6:af:a3:9e:11:a7:50:e7:07:04:bb:63:82:e5:cc:
ec:1f:ea:73:a2:2e:f5:ad:c2:bf:19:e9:a5:71:a4:
65:0f:1c:9e:22:f1:9d:74:fc:8e:34:3c:51:07:8b:
33:d6:40:a9:ad:d3:ff:17:b1:56:15:99:28:73:5d:
8a:96:2f:21:5a:1c:05:90:10:dc:3e:42:f4:8d:ec:
76:a0:b3:85:07:9e:2f:ba:22:ce:ad:51:29:be:06:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:CF:C8:08:93:AF:A4:5E:D6:3F:36:15:BF:07:1D:3B:C6:10:5E
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:80:d2:e4:22:88:16:ed:82:79:bd:e0:f3:d5:d1:8d:cb:46:
a4:38:1c:b4:57:df:fd:7f:6e:ed:d0:e4:fd:12:15:f2:08:1e:
c6:c4:7e:66:5c:95:2f:f2:4b:e3:da:af:da:1b:87:8d:55:10:
21:09:8b:29:0f:6b:fb:fc:ee:e1:c0:af:00:01:cc:8a:cf:e3:
b5:7f:f1:d2:72:f8:8e:16:a2:1f:68:5e:d1:55:45:d5:32:c5:
b3:b3:f8:b7:d2:f4:b5:36:9d:ac:5d:f7:66:80:5b:dd:2d:72:
67:05:05:10:ff:46:c5:6f:d7:ef:b0:02:70:54:88:c6:43:23:
71:f1:45:e7:77:36:3e:bc:12:70:42:a1:cf:d4:f6:b3:4e:bd:
4e:2b:b6:5b:1d:aa:43:77:b0:b3:18:53:0b:54:5a:d1:f4:3d:
8c:0a:0c:30:01:98:bb:fa:a9:7c:9e:58:db:91:e2:20:56:de:
9e:7c:c3:77:69:05:96:31:8c:b7:aa:b7:d5:1f:b1:07:96:da:
d0:79:72:3b:57:d0:89:c7:41:84:56:0c:78:e6:1d:45:72:80:
87:6a:72:ca:bb:13:75:3e:85:4d:a6:f4:7a:80:7f:69:87:0a:
02:36:2e:93:f7:8f:7c:3a:06:cb:5c:60:7b:08:87:88:ed:b4:
85:4b:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:50 2026 by rpki-client