Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: CmRDYYokz2B5/bkI61ftssNhY5szKId8AIL/3ybfc68=
Subject key identifier: F9:B0:62:ED:E4:10:8E:E7:9F:00:D3:F4:70:C8:B4:FD:9C:78:4F:71
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019D2695C1AEDB12FDCDA730B0ABC64F6AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 73
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: 8442Je68uqB0ToJ0vWw2h9dKie8R+k3RVKo/ISsvmpY=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c1:ae:db:12:fd:cd:a7:30:b0:ab:c6:4f:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=f9b062ede4108ee79f00d3f470c8b4fd9c784f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:60:8b:ed:ce:1d:d8:f7:a6:af:1a:7e:a1:
28:b1:d4:cf:7b:cf:16:d3:c3:fe:99:80:9c:ba:21:
5d:c7:6b:29:a9:e6:82:b2:71:c8:eb:49:a8:ee:45:
64:3c:5b:bf:16:e1:29:58:27:4f:45:de:10:f6:45:
4f:c9:7d:c6:9d:99:52:86:c0:72:45:ff:49:f9:a8:
b4:81:d4:9c:f0:a5:f8:e3:03:f4:34:32:2d:e3:51:
75:d6:39:4e:33:f8:9a:92:e1:79:cd:57:7d:3d:cb:
f7:df:2b:c0:10:ba:72:5d:84:b1:a4:0e:d3:14:23:
dc:3d:ca:3f:19:8e:78:9d:59:72:36:ea:56:de:c8:
47:28:87:79:cf:7f:ae:07:0a:bd:b4:98:ee:6c:42:
bf:bc:9f:b9:ca:8a:99:43:ea:be:b7:a8:0a:dd:b6:
90:7a:dc:13:2a:93:74:4b:03:9d:9e:54:4d:e2:83:
ff:3a:4a:3b:70:39:7a:7f:5d:9e:82:df:96:0b:d8:
18:87:ce:36:22:45:63:bb:b8:51:b5:2a:b8:c3:cd:
23:b9:5b:20:2f:1b:1a:66:d6:35:08:e1:9b:a4:93:
64:ca:7a:ac:d9:05:9b:16:09:1e:75:8f:05:a3:98:
e7:27:63:d0:f2:5f:71:8f:1a:14:ed:86:2e:86:3e:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:62:ED:E4:10:8E:E7:9F:00:D3:F4:70:C8:B4:FD:9C:78:4F:71
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:dd:b9:71:c3:88:7c:91:26:4a:66:66:cb:fb:ba:d4:8f:a9:
e2:e2:a1:92:92:3d:94:9f:81:e2:dd:26:2f:48:32:f1:7c:72:
51:b3:90:48:5b:64:75:66:c0:a1:ef:85:58:8a:d2:d6:bb:d0:
58:e9:e8:36:d8:b3:eb:e3:63:1d:dc:38:cc:31:fc:10:19:c2:
22:1d:bc:30:f7:d7:6a:41:54:5c:2e:6b:7b:8e:56:fc:5a:92:
b8:fe:bf:ce:48:d5:54:73:40:b9:21:0b:49:47:58:56:c5:b7:
af:b3:46:94:be:f0:1b:35:d8:57:c6:74:58:19:f7:f6:de:16:
c3:df:7a:8e:39:fd:30:ec:80:93:07:0d:ad:d1:5b:45:9b:af:
10:db:db:ed:1c:80:71:36:8c:96:f7:53:41:11:88:d3:12:95:
ce:34:46:e3:55:c1:2c:8f:83:02:4c:b2:1f:a9:8d:ed:19:94:
48:45:46:8c:df:bf:0a:0f:82:eb:0b:4a:db:e3:80:f8:47:13:
af:db:3c:02:fb:de:af:7b:3d:18:6d:8c:0b:39:d5:00:3a:b9:
c7:43:df:a3:09:bc:0b:7c:32:ad:87:bf:89:c5:a8:ab:54:41:
ac:eb:fe:61:48:27:c7:f4:59:69:21:65:17:f9:21:ae:01:08:
71:5c:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:27 2026 by rpki-client