Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: SjeX1QEML7D/IvYul5bowxzgSXxZNEP2FZLxFqilMnE=
Subject key identifier: F8:AE:D4:09:C9:F6:42:71:8C:9A:EC:DA:43:B5:83:E5:46:B6:63:8E
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 019D284E06F8DE2FF49FC80AC6B183D2C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: TQEPPf5G6T08F8Vva0Hy8KxXKFRXOVXo5BiiMbZvQjQ=)
2: QVJESyUgcIDmNN8KuNewhKTn8O8.roa (hash: rsPEgVBQN8qb3Gf6bi1+pSFcHaV0wEFs/DT4FZ8+49I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:06:f8:de:2f:f4:9f:c8:0a:c6:b1:83:d2:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=f8aed409c9f642718c9aecda43b583e546b6638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:cc:f9:10:ba:74:a9:93:9d:3b:c6:f3:9e:
60:78:65:ef:fc:ad:8a:34:51:1a:75:53:35:a2:af:
73:ac:ef:a2:66:d3:4b:b1:a7:76:48:47:5d:a3:fd:
be:95:69:a9:5f:04:36:99:e6:0d:a0:1a:5d:b4:29:
ec:80:f1:bc:dc:f6:94:f4:fb:a9:e7:c5:fb:ae:1d:
bf:42:c8:a1:67:89:82:52:75:14:d7:e8:48:b5:9a:
3f:c0:21:1f:bd:8d:6f:d7:cf:ab:31:57:e0:1b:33:
71:c5:1b:51:82:cd:90:2d:fd:9d:1a:2a:fc:d0:3a:
66:70:ef:a3:88:6c:c0:6d:d5:82:2d:12:fd:70:e7:
fb:41:c6:1a:01:6a:77:fa:26:b8:0d:df:b8:71:3c:
95:99:e0:60:5e:30:5d:53:41:aa:1b:49:f4:14:f3:
a6:12:61:0a:d0:57:2e:d7:a7:cb:74:15:2f:bb:1c:
52:67:10:c3:be:f7:7d:1a:3c:46:e8:c9:be:52:35:
d2:fd:85:16:67:33:71:b5:32:52:16:be:51:8f:3c:
32:10:6f:a7:5b:8c:06:90:53:d8:0a:ff:47:45:c7:
34:42:85:4a:a1:15:07:44:26:58:47:8f:44:14:a5:
78:25:02:72:85:84:d9:71:45:70:f6:a8:dc:e7:ad:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:D4:09:C9:F6:42:71:8C:9A:EC:DA:43:B5:83:E5:46:B6:63:8E
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:51:11:2f:3e:f9:41:c1:d7:04:e4:45:0e:cf:23:17:db:
d7:9c:b7:52:58:68:b1:b8:15:52:33:cc:8d:58:55:c4:da:84:
08:5f:d8:e1:2f:1a:90:61:ff:48:06:2b:fc:a8:b6:e1:dc:a6:
85:8e:ef:5c:91:b5:19:9e:09:1e:ec:ae:21:3a:8a:f6:35:fd:
b5:1e:40:c6:d2:d6:3c:31:5d:52:a0:40:80:cb:41:a7:69:c6:
bd:56:57:b0:5c:1a:72:aa:59:ab:74:7f:05:2a:fd:50:25:69:
e2:2b:ce:71:34:15:66:db:1e:9f:cf:4b:32:f9:f7:c9:ca:5e:
1b:33:5c:49:ae:8b:2c:57:ac:b3:3d:ed:6f:7e:2b:cd:cc:39:
7c:58:f4:37:7c:cc:db:11:51:bc:c5:1c:bf:b4:ad:f6:e5:5f:
71:ee:f3:a2:ce:f4:a2:19:73:65:b6:17:c3:ba:9a:89:fd:36:
e6:9c:93:71:44:8a:be:1b:6d:e3:8a:6f:79:86:7b:e4:ca:1b:
42:9d:99:ae:f8:f8:a8:03:88:a9:c5:96:42:2b:76:98:79:2a:
f3:08:7f:53:ae:83:98:c7:aa:48:7c:75:ac:1e:9b:0a:a8:1c:
b4:77:f2:54:14:82:47:b8:61:fa:0a:fb:41:3d:7f:84:30:a1:
b7:7b:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:23 2026 by rpki-client