Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: yo4sMzBr/QKuIffFkin6uKKU3gTbHlQXf3K+JE78h9c=
Subject key identifier: A1:8D:49:57:15:E9:B5:BD:44:90:F4:63:97:A6:97:7F:60:AB:90:40
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019D28843E5C373C8133DB4AC53437BCC291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0C0B
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: N8i7W3orWj8zlvV/tv9axtltP/y/D10OJj0m4q2YFfs=)
2: Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa (hash: Wqi7qOZvgM3RPc29KzFtX0inQZlH2CPxij4n38nvX8w=)
3: k73lr23Ko0PUHecaVAD5eNt0BdE.roa (hash: jDoZdxTL2XsTO4CsJMxRLFBk8jCh5yCbT9WYypON6kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3e:5c:37:3c:81:33:db:4a:c5:34:37:bc:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=a18d495715e9b5bd4490f46397a6977f60ab9040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:28:5e:96:a4:4e:ab:83:5d:fe:e6:1f:08:
34:a4:84:d5:5c:ea:ea:d3:81:c3:0a:a1:eb:cb:7b:
5b:49:13:c4:a1:06:6f:85:73:56:28:2d:fc:4d:af:
1a:e6:c0:d8:36:ef:25:59:44:5a:b5:6c:3e:f9:0a:
a1:3d:63:72:74:17:62:d0:08:9a:11:49:85:db:e6:
92:34:c5:df:af:de:d8:b8:d0:0b:47:07:b3:09:97:
30:f4:4f:4e:86:06:6b:ff:9d:b4:18:f4:9c:a3:27:
a6:ad:61:97:35:e8:ce:a3:3e:cc:84:da:b0:f5:06:
6f:26:d1:fa:f1:6a:21:c2:e1:ff:df:46:33:6c:a7:
74:80:6c:56:fe:86:f0:d1:3c:15:3e:b1:f5:aa:9f:
64:af:c9:f0:72:46:15:99:ce:9c:a6:3b:57:48:92:
57:6f:56:36:bc:56:8c:2c:d5:4f:5f:88:0b:92:3b:
56:e3:28:a4:a0:85:fd:20:60:e3:d3:75:06:04:ee:
a4:a5:3a:51:14:e2:55:27:7b:37:5f:ba:16:61:7b:
6a:eb:12:37:b5:ca:83:ff:22:a2:7d:6d:7a:2f:bc:
01:34:51:18:14:81:3b:45:78:77:8a:72:93:85:4b:
29:70:6c:59:1b:fa:2f:e9:7c:ae:47:75:2e:3f:b3:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8D:49:57:15:E9:B5:BD:44:90:F4:63:97:A6:97:7F:60:AB:90:40
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:66:9e:9d:8b:2e:56:01:6b:0b:07:09:5f:51:b5:d3:74:
b7:6f:74:23:6d:0a:02:92:8c:20:76:0f:d0:88:68:f0:c4:7c:
99:a7:6c:36:c0:d7:ed:c3:91:ac:a7:25:c4:39:60:8b:a6:15:
33:d7:f7:f4:ae:c1:f7:5a:be:d4:6d:e0:ea:20:6c:c8:1b:7c:
d8:c3:06:90:f9:95:42:da:5a:33:17:62:2a:b3:67:91:5c:02:
db:7d:0f:90:21:c1:41:92:24:5f:c3:41:9b:32:36:11:41:80:
8e:69:91:fb:96:4c:3c:bb:55:fe:7b:19:5b:77:5a:7b:e7:69:
ef:31:ce:c7:f8:ff:8c:2e:86:33:70:85:33:92:20:b3:86:f6:
b7:e7:e1:f8:2b:0d:d1:d3:11:97:99:15:b4:ff:12:a4:b9:03:
d7:99:16:1c:4c:20:81:d7:b0:2e:77:a4:ef:ff:63:94:b9:f3:
60:c9:d1:d2:c5:da:62:bf:db:9d:89:7a:59:64:0b:da:ab:cb:
9c:3d:b6:01:41:39:7b:22:c6:05:37:f6:ec:10:63:d4:5d:3c:
88:2a:44:f0:db:b7:d9:4f:08:23:f7:51:65:77:72:95:a2:9b:
a3:dd:eb:ec:1b:02:34:da:55:ee:34:1c:42:0c:0d:34:20:15:
ae:cf:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:10 2026 by rpki-client