Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: h7osN4CsgfGPCdDfSlnbEc1jJTaY9XVbCwqUEuadHnM=
Subject key identifier: B9:5E:B3:76:54:8A:94:5B:D4:44:EB:BC:76:64:11:CB:3E:7E:A2:3D
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019D270436EB90D70AF9B276CA451F72ABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 146A
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: E4j4M8opZnoRQOsX8KerQKr2+Y7PGXD95usfB0wwfz0=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:36:eb:90:d7:0a:f9:b2:76:ca:45:1f:72:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=b95eb376548a945bd444ebbc766411cb3e7ea23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:e6:57:91:c1:64:5b:e9:ea:fd:79:5d:29:
4e:79:18:3c:36:94:5c:47:7b:0b:d2:63:0b:91:97:
71:14:db:b3:93:67:b6:0e:6d:97:3e:d0:ae:45:1e:
d6:d7:96:34:7b:16:58:da:b9:86:56:e3:73:3d:c3:
36:a4:f3:11:28:c0:db:c0:c6:e3:42:0f:d0:43:ee:
c4:50:fc:c2:0c:48:43:f8:e7:93:07:00:82:ae:15:
eb:3f:43:12:90:f0:3b:c5:25:2c:70:87:90:f6:e6:
47:9a:6b:33:37:20:be:a0:d7:86:81:83:33:a2:a4:
55:c2:1b:7d:db:d0:c4:f8:49:fa:0f:ce:93:0f:ae:
2e:c9:c4:11:2e:d8:3c:3b:99:0a:ff:ed:44:e6:43:
18:d3:18:dc:93:0d:f7:26:c2:3b:f9:05:c9:f5:d7:
57:dd:d8:cc:a8:6d:a5:a0:58:b2:a5:6b:39:d6:54:
57:ae:36:e7:98:e3:9c:95:4b:fb:72:ed:e4:f1:5e:
d7:54:04:0c:57:35:ad:b6:fd:24:03:19:74:d9:c5:
56:98:94:d5:92:ff:fa:f8:9a:1f:84:b7:d2:cf:b8:
36:7f:c3:d9:b8:1e:1d:ee:41:c2:46:6f:ae:a8:ff:
9f:66:c2:c9:e8:a2:1a:09:81:9d:c6:7f:39:99:84:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:B3:76:54:8A:94:5B:D4:44:EB:BC:76:64:11:CB:3E:7E:A2:3D
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:92:9e:0b:e8:76:d7:2a:d6:d0:37:08:fe:8c:4c:0c:86:
7c:34:82:18:bb:e1:ba:4f:42:aa:c6:28:a1:c7:1d:e3:58:86:
da:5d:c4:4c:3b:a5:41:c1:26:9e:a5:91:e8:a1:e0:a1:47:74:
d6:52:48:d7:33:fa:7e:08:2b:cb:8f:25:79:e2:d1:c8:bd:06:
1d:d1:b3:cd:aa:18:91:2a:26:f5:7b:96:79:89:e7:fe:31:7c:
09:11:84:3a:95:8d:1a:4c:ae:41:bc:4b:2f:aa:03:37:48:c6:
a1:48:e4:a6:26:7b:48:4c:c3:fd:fe:e0:db:21:9b:af:d7:86:
6d:bc:a0:e4:03:48:26:d3:bf:6b:30:44:b9:ca:a6:65:99:36:
1c:a6:b5:4f:05:dc:6c:22:52:0e:89:8f:90:0f:79:17:df:8a:
eb:4b:33:44:10:fd:b6:d2:8d:57:46:d0:a1:6c:98:be:60:5b:
cf:73:ff:aa:ee:9e:b3:67:59:f3:8c:bc:a0:20:14:51:b2:9f:
65:e5:33:1d:57:f3:a7:75:82:e6:f3:45:a6:35:c5:ae:40:5f:
84:53:e7:b5:01:84:5e:3d:ef:45:67:d7:65:9b:e8:ee:6e:23:
97:a9:30:82:8d:18:76:74:0a:4c:64:62:d3:31:09:3b:2a:b5:
00:60:54:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:18 2026 by rpki-client