Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: dNrXmxl3d3Hkd+rknWxXJNzGoVjjBVtPkG4nxqU2ghk=
Subject key identifier: 9D:7B:9B:C2:DC:DE:80:0B:A8:9E:DC:F3:FE:E4:F8:1B:09:D6:6C:6F
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019D265F414C4FA225009DE0DA2F615200A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0D93
Signing time: Wed 25 Mar 2026 19:01:09 +0000
Manifest this update: Wed 25 Mar 2026 19:01:09 +0000
Manifest next update: Thu 26 Mar 2026 19:01:09 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: QbfUX0duqfbqZ8DNgYb/sOsxoIA2DMzUMiUQ/oKDI30=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:41:4c:4f:a2:25:00:9d:e0:da:2f:61:52:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Mar 25 19:01:09 2026 GMT
Not After : Mar 26 19:01:09 2026 GMT
Subject: CN=9d7b9bc2dcde800ba89edcf3fee4f81b09d66c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:ef:16:ae:a6:48:e8:1c:1f:ba:e0:1e:f2:
ca:50:cc:fe:b3:e1:f1:fb:6e:85:c4:04:79:2f:e0:
1f:16:c9:b2:41:cb:f1:3e:7c:90:e4:bd:2a:06:24:
2e:72:da:b6:84:39:4e:0a:b2:03:45:7d:ae:b0:0a:
35:c9:02:95:ae:f5:3b:aa:c5:66:74:0f:cc:c3:c3:
34:a9:71:43:b2:3c:f9:e4:17:63:c2:49:ce:8e:1b:
be:1d:25:5e:35:55:56:60:dc:f1:67:a4:3d:64:ed:
54:83:a5:70:7a:d1:ea:6e:47:b1:d1:a4:bc:90:e9:
0c:c2:27:38:ef:00:f9:ab:75:93:2c:7d:5d:0a:ad:
cc:ee:cb:a1:6b:7d:fe:e6:bc:e8:53:3f:c6:0b:36:
2b:0d:d0:c5:14:47:8c:d6:ec:49:55:f8:61:95:84:
9b:d2:a6:39:72:18:b4:6e:2e:f9:33:10:2a:87:f1:
37:e2:99:b7:fd:01:31:ae:68:d3:e5:82:41:8c:61:
ff:82:c7:ef:3a:50:c6:f0:ba:a3:82:d4:ae:c3:1f:
00:9f:0e:28:0e:af:99:8e:7f:cd:d0:d3:17:fb:20:
b3:de:94:f1:10:ac:ed:38:c6:23:ff:c9:49:f9:a9:
f7:b9:02:00:45:a4:b1:d0:42:75:dd:3e:a2:4e:fd:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:9B:C2:DC:DE:80:0B:A8:9E:DC:F3:FE:E4:F8:1B:09:D6:6C:6F
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ec:5b:94:7e:c3:e3:4a:ee:5f:ec:6f:8d:1c:dd:a1:91:da:
8e:c7:af:e4:2b:0a:6d:36:21:71:48:f0:c4:b7:a5:1e:fb:26:
a1:53:b7:41:46:90:dc:d0:c6:25:3d:eb:97:a0:64:70:f4:82:
8e:dc:2f:cf:a0:2c:50:bf:04:ad:04:9a:d2:22:6c:3c:12:d6:
44:e3:8d:4b:53:75:a3:5c:3d:84:a5:e4:08:35:d7:3c:56:55:
a7:5e:74:f5:3b:1b:15:dd:b4:6e:20:0e:67:06:00:a2:ec:f7:
7a:88:42:8b:ae:27:e2:be:8a:80:ba:03:b1:30:27:e4:7b:3d:
ac:f9:30:0a:95:76:54:9e:6d:2a:66:5e:e8:4b:20:1e:72:bb:
7e:db:67:01:67:54:c6:29:88:9d:ea:a5:f1:fd:32:f5:22:e0:
9d:73:cc:66:2d:52:3b:af:17:1b:50:47:18:97:98:4e:38:fb:
a1:82:55:98:3f:d9:3f:3c:42:bb:ad:a8:99:36:db:91:8f:4a:
a7:59:92:24:bc:7f:f0:65:9d:80:bb:d8:72:0d:b5:b3:ee:62:
2f:f0:36:a3:8f:25:7a:2d:92:5a:05:1f:34:c7:9e:6f:36:4a:
01:75:43:9c:3a:cd:21:05:94:43:6c:a2:01:0c:9b:96:99:6c:
44:ef:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:16 2026 by rpki-client