Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: fL9QnDzaPqF40amoSzyyegLEpMGLvo1cORg34GtwqB4=
Subject key identifier: 9E:8A:17:BA:9D:31:78:6A:7A:35:FB:D8:C2:15:32:D2:9C:FF:84:BC
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 019D2703E97D80C903941093CD4A5B7EDD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 080B
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: ohiuPKRfDrw35L8C+tKkKOBlMc0kydNKIxC0/vf3R+Q=)
2: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
3: ezZ2s7vM_vTGuAjYXi6un0LAHgM.roa (hash: FqUWKm/wtZJygI56D9CwfC5nsdth685XmNZzJnjwPBQ=)
4: zkgdKHScYcfkNf_hh7vlGDs0B88.roa (hash: DtYW3iy119fpBsexhV56/OzVqBZUBd8eZdz8luW6zw4=)
5: zz2jRWtl0ZmBUMIyfCqK089JqZE.roa (hash: 6YCEfjH+kikFIKbX6N6L9tIisswKqNgalcvAp8ZWIls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e9:7d:80:c9:03:94:10:93:cd:4a:5b:7e:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=9e8a17ba9d31786a7a35fbd8c21532d29cff84bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:28:a5:4c:62:30:1f:1d:93:92:87:61:3f:
55:6c:cf:ba:f3:6f:3a:30:d9:fa:46:d2:e3:82:7f:
fb:fb:32:41:e8:f1:ef:b9:80:bf:7f:1b:12:cc:4b:
9f:7d:4d:28:a7:95:88:df:98:df:b6:fe:1b:45:1f:
b4:5f:c1:92:1d:e8:9d:c3:3d:a0:a7:c1:f1:cb:fa:
aa:75:54:6f:6c:43:91:77:93:58:81:cd:cc:af:e8:
27:a2:38:de:d1:bb:a1:47:25:61:b1:d5:2c:16:50:
b6:42:a3:9f:ac:93:13:a2:72:17:f2:37:db:48:b9:
4c:c4:a4:0b:1c:54:7a:f2:d0:55:d3:e2:0e:75:96:
91:b9:22:17:eb:8f:a6:d7:9f:85:29:0b:b5:d0:0a:
89:13:a8:77:c7:c3:d9:9a:82:da:fa:92:94:c5:7d:
9f:77:a2:f1:ce:1c:11:b5:67:0f:89:55:c1:d3:7b:
62:0e:cc:4f:b3:4f:de:bc:d9:12:9b:51:64:be:37:
ea:e1:61:f0:44:d4:b5:60:a1:7c:21:1a:70:f1:bb:
89:96:9f:9d:63:6f:fa:af:3d:f5:b3:34:68:24:87:
79:68:f8:0a:5b:61:17:3d:86:d1:7f:df:89:f9:db:
ae:49:4d:2b:01:45:f6:13:72:11:5e:e7:08:03:0b:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8A:17:BA:9D:31:78:6A:7A:35:FB:D8:C2:15:32:D2:9C:FF:84:BC
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a6:86:d7:7e:c0:d6:bd:20:41:cd:f6:37:94:33:57:e0:89:
f7:7b:13:c8:a6:e7:bb:48:9e:9a:36:a7:1a:9d:1a:ac:1e:de:
40:8a:3a:7a:54:57:f0:85:8a:27:4e:75:a0:56:c3:ad:68:bb:
71:20:b7:80:05:5c:21:33:11:35:57:44:46:e2:5b:77:1f:3e:
73:0d:25:04:f6:35:e6:e8:0d:29:6d:e9:27:52:b0:70:89:d0:
df:e2:e3:cc:12:d1:f4:71:4c:fd:38:c7:87:dd:9e:9d:6b:73:
c0:a4:92:2f:af:01:2d:f7:1f:f1:68:58:f2:d6:c4:a9:80:d6:
9f:2e:77:f4:a9:38:d3:24:c5:f0:65:3f:63:b7:cd:1b:0c:f3:
41:75:d5:56:05:d4:86:07:c8:99:ae:06:25:aa:4f:97:1e:15:
4e:3b:a0:ab:ff:78:95:68:e8:29:5d:0f:84:27:4f:e7:64:ee:
a3:3e:81:c7:3f:c6:53:79:68:10:65:38:01:39:3e:d2:30:27:
9a:c0:55:22:75:02:e6:8f:7d:80:ea:1d:cb:65:47:94:a7:51:
ec:90:f4:23:ee:1d:96:96:7b:0d:30:17:83:c7:59:9b:dd:10:
33:13:73:67:25:1b:ef:91:af:21:67:76:a6:e6:c1:5f:6e:c6:
5b:0b:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:08 2026 by rpki-client