Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: m0pO6tCA9iDJN0Zp8Cn8tWamXH5AgnlE6Crv2rEP/j0=
Subject key identifier: DE:48:1F:D6:19:47:4E:B7:CA:20:4A:A0:0C:72:36:C9:C8:EA:8F:63
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019D2A3B56CBFE93D3B3445D147E12AF5832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0777
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: qHQxsMNYn3looAQsi/KpbBSduLtU/Rz2XjbIYEq0wl8=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:56:cb:fe:93:d3:b3:44:5d:14:7e:12:af:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=de481fd619474eb7ca204aa00c7236c9c8ea8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:c5:4c:3d:e1:36:12:c7:2b:e4:fd:e5:ab:
bd:b9:49:a4:7d:43:9c:89:97:08:c1:ba:4d:c4:6e:
1d:93:7e:4a:bf:ae:a4:af:5d:02:73:9e:f2:5f:ce:
2f:cd:8c:6f:2f:9d:84:aa:4e:54:82:97:4d:0c:22:
76:5d:da:33:7d:aa:84:ad:36:11:6e:1d:ba:21:d2:
35:a1:96:bb:99:05:86:b9:3d:99:20:bc:4e:10:c9:
83:05:37:2d:f1:6d:4d:e7:be:5c:d3:4a:4a:4c:b3:
38:40:1f:ae:c9:b1:f8:d7:35:11:19:26:3f:00:b6:
4a:51:36:6a:2e:a0:0c:12:d0:2f:07:4f:3f:12:d8:
3d:d5:cc:98:20:01:42:31:cd:2e:f1:73:3c:b5:8b:
f9:d7:bf:7e:a9:bd:a6:e8:b7:d9:69:36:bf:aa:a8:
30:6d:ce:e6:9e:eb:4a:d8:dc:f7:47:e1:d3:25:2a:
2f:47:6f:f7:65:01:78:88:85:30:24:ea:8e:59:65:
cb:ce:81:8b:12:a7:ce:df:c4:44:a2:f0:36:3b:1c:
32:d6:ff:e0:dd:b0:98:11:d8:86:85:c7:44:a7:61:
d6:51:b1:f5:af:3d:29:58:4a:ef:df:64:d4:a2:85:
d3:19:5a:ab:44:c5:99:ca:bf:14:2d:7e:31:3a:1e:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:48:1F:D6:19:47:4E:B7:CA:20:4A:A0:0C:72:36:C9:C8:EA:8F:63
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:bd:40:7d:5f:4e:23:27:65:cb:d3:78:56:29:ad:68:ed:
3c:ef:87:53:ae:fe:09:95:91:a1:d0:f3:3b:ad:a4:77:8f:72:
05:20:36:04:4f:3b:fb:a0:37:7a:52:82:0d:41:47:a6:1e:6e:
8e:82:5f:74:70:4b:8e:a8:fc:79:4e:0b:62:7f:54:70:d6:be:
69:43:ac:3a:89:61:3b:29:f2:c8:0d:06:da:ff:19:1f:27:aa:
d5:7f:41:e6:7e:9e:1f:ef:e1:6b:ac:fa:32:b1:4e:33:66:61:
d5:c7:8d:3a:2e:7d:2e:37:99:b6:21:07:e9:8a:47:87:97:c0:
e4:08:3e:cd:b7:4f:92:fe:a7:e7:68:98:6d:26:3c:39:58:df:
82:0c:5a:55:7a:39:40:23:9f:90:0e:7d:37:54:ad:7c:fc:91:
22:51:63:ec:7b:cd:fd:c0:8e:13:c2:90:0f:14:4e:1e:13:31:
ab:f0:ea:f6:79:88:c8:1d:de:eb:2c:6a:7d:e0:c6:51:73:00:
a0:34:c1:cf:7b:60:a6:37:65:cf:96:fa:8d:e8:c3:2f:3b:76:
1e:54:ba:01:cb:55:e4:18:34:54:26:81:39:61:f8:b6:cd:2d:
9e:05:0d:5c:c1:28:83:8b:97:41:d4:ff:80:19:9a:b5:a1:ad:
db:6a:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:48 2026 by rpki-client