Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: szJAu7M10vri0QhcLUaNKYFDc1h/TmbKXtKfi0Xpx8U=
Subject key identifier: B2:2A:1A:80:C3:AC:F4:F7:6E:20:1A:DF:B6:C1:B2:D9:94:90:85:56
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019D2996DEE715A70C4E4356056B14D44E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 152C
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: QKDZ+7MhIveCaTC52txyjGQdb8uq9XlbSlI9Yr3GyKE=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:de:e7:15:a7:0c:4e:43:56:05:6b:14:d4:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=b22a1a80c3acf4f76e201adfb6c1b2d994908556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:b0:a7:0a:82:62:96:55:1a:c6:49:a2:1c:
7d:ee:78:4b:2c:d5:14:a1:f6:bd:c1:f2:d0:6b:0a:
72:9a:52:57:cf:03:c3:91:d5:9a:e7:6b:69:e4:9e:
e3:51:8d:2f:bf:ce:39:4d:e5:e0:fd:f7:eb:6f:97:
37:6b:3e:3d:d0:ba:ff:79:e7:0e:ff:09:5b:04:a5:
86:f7:ae:fc:58:cf:3b:7d:38:9f:37:50:60:86:c2:
3a:30:ff:88:f2:8d:94:4a:60:0c:52:b7:ab:18:c2:
78:21:ff:71:3b:62:72:6e:da:22:d8:14:9f:33:80:
a1:ce:52:28:ea:00:0c:a8:eb:5e:63:7a:a5:67:0b:
14:1c:40:f0:a5:96:50:94:3e:13:18:b1:14:6b:73:
9f:cd:cc:a1:74:12:38:1e:9c:b2:c8:64:b6:33:c8:
d9:01:39:91:6e:5c:08:bd:57:a3:fd:d9:5e:28:77:
92:52:32:d3:7d:3c:fb:f8:82:a1:71:12:58:06:fc:
46:81:4d:80:74:55:61:61:b8:fb:f0:8c:51:b6:3e:
21:1e:a3:79:8b:4c:6a:8d:5b:bf:6c:24:1c:25:02:
4b:82:1a:ad:83:63:d9:6a:ea:06:e1:6e:29:b8:ff:
2a:8d:27:2a:96:d1:ed:1a:6b:d2:61:f5:91:f2:95:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:1A:80:C3:AC:F4:F7:6E:20:1A:DF:B6:C1:B2:D9:94:90:85:56
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:a3:0e:49:26:fa:23:bf:8d:eb:f5:1d:c2:95:b1:d9:cd:
95:d6:84:cb:5c:87:de:38:6c:e1:0c:ba:53:6d:f0:f6:8c:ad:
59:98:72:b1:62:7d:41:fc:20:02:ab:d7:fc:2c:9c:7f:8e:14:
f5:c3:91:23:e2:e4:ac:96:86:3b:29:27:ac:2d:23:f8:5c:1e:
29:4c:f4:d7:84:34:24:89:57:f3:54:45:97:a1:e5:50:4e:b0:
42:bc:3c:e3:5c:4c:d4:c3:66:17:bb:9e:41:2d:d1:54:4e:b6:
4e:dc:24:af:3c:63:14:66:93:66:6e:ba:ff:a4:e8:e1:85:e8:
f3:11:ae:bf:a0:b1:cb:0e:f8:96:c2:94:40:13:cd:bb:7b:2a:
b7:ab:14:a8:34:d7:e7:6a:3c:a2:be:6f:f7:62:3b:e0:60:b3:
53:46:86:ba:56:fb:a7:d1:91:e8:d4:b5:45:58:a2:46:cd:15:
b3:2d:f9:49:ef:6d:e6:04:e4:cf:e7:43:76:0c:43:a5:7b:66:
82:8b:cd:5e:57:6b:0d:c4:03:b0:66:ea:af:18:2d:17:ea:67:
52:84:6f:72:37:13:fd:09:e9:25:25:f2:a1:94:8f:a0:00:0f:
01:f0:f1:80:06:42:f9:64:91:86:79:0f:34:26:9e:ee:a0:41:
10:d7:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:30 2026 by rpki-client