Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: obaIARPlfPYCgkWKMKb2rLJC0l3JvukFWJ9VOjJwSX8=
Subject key identifier: BD:4C:75:BB:9E:49:B4:E0:97:1D:1C:CC:C9:CA:3D:1A:0A:18:F7:05
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 019D284DF249BDD628D9DD0B833D8BB3982E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 17DC
Signing time: Thu 26 Mar 2026 04:01:30 +0000
Manifest this update: Thu 26 Mar 2026 04:01:30 +0000
Manifest next update: Fri 27 Mar 2026 04:01:30 +0000
Files and hashes: 1: 2VjRyY35srd4tFZwYR3n2JNFpTM.roa (hash: KVtq1ksbn0eFzWJ+vieJNzHVkLQs/x4Zv2yLi0iRHw8=)
2: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: HQNrC2e9+QuQDxy88X+bLieL1r0naUuA9swsinimIVc=)
3: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (hash: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ=)
4: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (hash: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f2:49:bd:d6:28:d9:dd:0b:83:3d:8b:b3:98:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Mar 26 04:01:30 2026 GMT
Not After : Mar 27 04:01:30 2026 GMT
Subject: CN=bd4c75bb9e49b4e0971d1cccc9ca3d1a0a18f705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:ff:43:7f:6c:38:33:14:b2:b6:b6:fc:65:
6c:8d:29:03:9e:ba:99:0e:88:02:0f:60:e5:65:e4:
5b:73:b3:5b:44:08:be:2e:18:91:66:58:10:16:14:
49:84:19:66:a6:9f:41:e9:e4:b3:8a:42:e9:b8:4c:
b8:cd:e3:34:ec:49:6e:ee:ad:c2:2d:57:28:0b:eb:
70:f2:a6:5d:e1:64:54:0e:bf:33:64:4c:50:84:c0:
f1:41:5b:8c:c1:8d:94:4c:a1:2f:63:77:d5:42:68:
f8:c4:b8:32:e0:3f:00:11:31:61:92:7d:61:29:17:
9b:8c:e1:74:9d:2f:5f:d1:26:e9:7c:a9:31:b9:2d:
65:0f:c9:21:30:bf:61:f9:ff:dc:a6:47:7e:e7:da:
27:af:c8:d8:b9:a1:22:cf:c4:95:31:50:fa:db:95:
c5:77:51:a4:90:2b:46:94:96:bc:a7:0a:7c:eb:67:
36:15:db:bf:ba:28:40:aa:5e:68:9f:e8:db:73:d3:
a0:45:f6:b3:a8:50:6e:52:04:b6:fc:88:ce:eb:6f:
8b:5c:dc:ab:de:c2:f2:9b:91:1b:e3:d4:2c:7d:67:
41:e8:d6:24:e6:4f:12:39:7b:00:59:ed:db:05:24:
fd:88:5d:ac:18:6e:33:29:29:28:47:3c:94:f4:e0:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:75:BB:9E:49:B4:E0:97:1D:1C:CC:C9:CA:3D:1A:0A:18:F7:05
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e1:a3:3e:44:6d:54:fd:2b:b7:ed:60:c3:e3:bd:20:28:01:
5a:a7:9e:34:14:2d:c2:1d:8a:d7:43:27:e0:e2:13:fa:f6:0a:
8e:91:49:1f:fb:17:46:c5:8a:5c:70:ab:4e:8f:03:9c:07:14:
ba:4d:17:eb:d1:d3:c9:99:05:8d:64:66:44:39:7c:ff:a7:1c:
ad:2e:da:de:47:25:e8:bc:4b:05:19:d1:df:d8:67:03:d3:96:
f4:4c:49:6b:4e:8d:ff:d0:48:cf:82:8c:8b:bc:e8:9d:96:01:
c0:8a:77:c8:96:8d:f6:24:6b:c9:df:11:70:9b:41:d0:0d:3b:
4f:ae:3f:84:b5:6e:cf:c8:84:0d:bf:60:a4:46:bc:46:b0:98:
9c:3f:de:3e:6c:b6:0c:d6:b4:22:67:ac:87:fc:37:1d:0b:ce:
ca:a9:78:f6:e4:17:43:1b:76:e5:c7:9d:2c:60:73:9c:23:b3:
cc:e3:5f:b7:5b:4c:ac:64:e3:53:3f:67:51:28:3e:c8:ab:81:
18:3e:87:6b:27:f1:9b:cd:2a:2e:5d:12:06:87:a5:ba:ad:57:
09:70:32:83:2c:0e:1c:d0:01:f0:a7:d3:0f:eb:f5:13:bc:86:
ee:19:cb:0c:13:14:b8:1e:c7:64:a9:18:45:4c:35:b1:97:39:
0f:5f:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:09 2026 by rpki-client