Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: hyDOu5g2z3jpjW0buYzM36aoGIb24XRXxAhcmg5oCdk=
Subject key identifier: AA:A4:58:38:FC:DB:E4:42:B0:B1:71:70:E8:CD:C1:42:D3:5B:55:B0
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019E1E35804DE7B69765E070269331F1733D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0C8D
Signing time: Tue 12 May 2026 22:01:23 +0000
Manifest this update: Tue 12 May 2026 22:01:23 +0000
Manifest next update: Wed 13 May 2026 22:01:23 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: /EVLU5OnY2R2kuj03icU1kSU2nTzsiryv5UBQN2gz4Q=)
2: 8eKxWvb4zfv90IxvIhC6Agnivz8.roa (hash: G16RKdZkVBD70lbGrNUAVc96E/zqs6SATLQUigTHejI=)
3: Zw_PlkCoc7b4w9c1NFRcTvHu_Fo.roa (hash: Wqi7qOZvgM3RPc29KzFtX0inQZlH2CPxij4n38nvX8w=)
4: bjmMFwcTT022Q6Y1BukBKmh8FIw.roa (hash: szlWCpj2SHYv29KWAoBFTIPCjX/50CbAjxQ0/D0JRaU=)
5: fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa (hash: JResCQGe6T+nLKqGjLFvLBJ3SMA0WiHLKq1Aux/XqUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:80:4d:e7:b6:97:65:e0:70:26:93:31:f1:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: May 12 22:01:23 2026 GMT
Not After : May 13 22:01:23 2026 GMT
Subject: CN=aaa45838fcdbe442b0b17170e8cdc142d35b55b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:de:6a:3e:51:b3:b9:17:01:0f:fd:0a:4d:
67:28:a4:63:0f:f8:bd:a0:e6:08:19:1d:df:1f:41:
9e:b6:0f:13:7c:bd:16:32:f3:eb:23:bd:ec:59:56:
c9:52:4e:d9:9f:c0:cc:cf:0e:62:95:c4:a1:66:2f:
af:12:a8:b5:6e:13:0c:73:7d:5c:ed:a9:75:bd:a7:
f6:22:00:16:6b:64:88:8d:6a:eb:92:d6:80:a5:71:
b1:1f:3b:97:60:52:1c:9e:eb:91:2f:dd:6c:c1:dd:
59:fe:d9:0b:57:86:76:9f:3f:cb:27:b2:24:3d:89:
e1:77:02:7c:1e:ce:4e:00:e7:09:a9:b0:66:55:d4:
67:f6:1c:d6:f1:cd:74:a2:5d:01:c4:85:f6:e7:82:
30:bc:9c:f1:63:e7:70:a3:5b:36:e7:aa:74:35:a5:
5a:a5:50:5f:c1:89:18:08:9a:ee:02:7e:ec:12:f9:
ce:fc:8f:f8:c4:d7:ef:77:61:14:2b:8b:a5:f3:47:
b1:d9:cb:b2:2c:08:a5:7c:2b:eb:da:7b:57:55:11:
9d:46:ee:99:99:88:76:c8:5b:07:62:7c:1f:06:b4:
ba:82:02:02:3a:37:0a:37:c2:e8:15:92:60:89:f4:
27:c0:d9:ad:52:12:30:14:06:90:8f:a6:fa:97:9c:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:58:38:FC:DB:E4:42:B0:B1:71:70:E8:CD:C1:42:D3:5B:55:B0
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:b5:c0:b9:c5:e5:40:34:f9:81:16:70:53:69:ea:8e:ee:
f4:e3:46:8f:f6:1a:56:fb:77:4d:6f:33:ca:c1:a4:cb:95:2a:
2b:c3:d6:f4:6f:34:42:e5:26:d0:cd:70:fb:2b:83:64:a4:09:
d1:6b:2f:08:c6:61:73:7d:34:97:f7:a1:b1:25:44:1e:af:4f:
f7:e6:2b:69:f6:9d:1c:da:e7:72:65:d7:f4:76:78:24:60:42:
08:65:6c:29:c7:96:f2:cb:5f:b7:20:bf:2c:65:03:2e:56:23:
09:c1:5a:2e:b7:14:da:b3:9e:c1:7c:e8:ce:f8:b6:c1:34:6f:
9f:21:87:6f:53:89:c3:82:75:69:a8:f6:bb:a2:6c:9a:7c:83:
5d:2c:79:ae:46:da:ff:58:59:c6:d5:47:97:ad:62:98:51:99:
3a:25:93:7f:19:53:e4:06:db:7b:d5:03:07:56:b8:84:cf:bb:
cb:3c:ac:ef:29:07:bd:85:e0:fa:be:e2:79:bf:50:a8:4b:5b:
bb:53:0e:ae:53:63:ac:9c:a5:1b:ed:30:34:13:85:f3:8a:24:
32:a5:d7:1e:a4:e8:4b:33:6d:61:a0:d1:bf:f3:85:93:67:27:
48:43:fa:ff:95:97:ba:0f:5f:a5:8e:b2:08:ac:59:c2:b7:d1:
e2:f3:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:16 2026 by rpki-client