Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: O7oDmA8d6MlhrWaewxZVlQiWNEe5cWdUAyetEeRjDMg=
Subject key identifier: AF:8A:44:88:97:5E:AE:E8:27:75:DD:2F:D7:67:47:9D:D3:FA:E8:02
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 019D2A3B6F18555B27A5D898F67E23D796A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 02E4
Signing time: Thu 26 Mar 2026 13:00:31 +0000
Manifest this update: Thu 26 Mar 2026 13:00:31 +0000
Manifest next update: Fri 27 Mar 2026 13:00:31 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: H81rvUENK1k6PA9M5H0dBzZoEZxynR1RRWwUhgkYYFc=)
2: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (hash: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:6f:18:55:5b:27:a5:d8:98:f6:7e:23:d7:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Mar 26 13:00:31 2026 GMT
Not After : Mar 27 13:00:31 2026 GMT
Subject: CN=af8a4488975eaee82775dd2fd767479dd3fae802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c6:2c:35:b8:30:cc:fe:62:ff:4a:a5:91:c0:
f2:ba:9e:45:1b:e7:c8:26:52:a7:47:39:d9:93:17:
4c:e1:9a:b9:34:c1:7b:a1:df:d4:0f:dd:eb:01:4a:
14:ba:62:d4:bb:04:54:4f:0d:42:a8:4f:e4:03:33:
fa:d2:88:d4:47:5e:1e:1b:b4:c0:c9:0b:36:6b:91:
7c:f0:6f:8e:20:62:f9:1e:27:54:42:fe:0c:2e:ff:
26:93:c8:b3:e7:97:73:c4:34:8c:1c:60:10:aa:89:
74:6b:01:cc:b7:0a:1e:7a:ee:27:94:46:53:62:59:
bd:82:20:e4:71:04:3f:03:9e:d0:c5:ac:9a:f0:98:
71:2c:54:ff:c4:16:ff:a7:aa:4d:20:71:36:2a:a8:
fb:57:ff:bd:7a:cc:7c:3d:88:fd:c9:76:4d:a6:1d:
1e:b4:ee:ce:d2:48:d4:86:07:0b:bb:3b:9e:17:75:
94:78:2c:e4:bd:b2:27:1b:ba:e2:bc:9f:2c:65:25:
21:e6:ba:00:1b:fa:9b:cb:7c:8b:fa:67:73:8c:b2:
fa:6d:0c:18:ab:ef:d2:7f:c5:6c:74:00:9f:91:e6:
43:76:b4:f2:cd:77:e7:0d:aa:6a:bb:ea:77:ed:10:
49:57:62:71:c2:32:95:ba:c6:88:6b:c6:64:3b:6b:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:44:88:97:5E:AE:E8:27:75:DD:2F:D7:67:47:9D:D3:FA:E8:02
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:a1:f4:73:0c:89:aa:06:17:ed:ae:30:96:ac:19:4c:47:
40:c9:f6:e0:58:00:36:12:44:8b:5c:eb:cd:ca:a3:54:9e:a0:
54:1c:f2:5e:b9:75:fa:f6:04:be:3d:6e:3a:2a:4d:aa:cd:88:
d7:46:33:1a:4d:6e:f5:b2:f3:7f:1a:6a:bf:33:c1:82:44:c9:
b1:7b:d4:55:6b:57:0b:57:0f:6b:1c:62:e2:ed:1d:78:4c:c4:
10:70:c0:ba:17:3c:ff:7a:6b:f0:1e:8e:a2:51:8b:b2:bd:dd:
2e:f4:10:35:b8:c2:ba:f4:43:a8:92:ea:27:a9:07:03:75:02:
1d:e0:43:bf:c7:d7:35:ec:d6:f4:f8:d7:1f:9b:62:07:e0:50:
51:21:92:95:4a:5e:b0:2b:7e:0b:93:d0:78:47:8b:70:04:53:
d0:f6:8b:02:dc:9d:57:30:af:0a:7f:c0:eb:1a:57:71:b4:39:
e0:49:9c:34:28:79:35:97:5a:22:95:0d:a6:ce:9f:44:47:a9:
ee:6a:c9:71:f2:06:4b:bc:b9:64:6c:60:50:58:85:4b:cb:07:
28:eb:6c:6a:d1:40:06:74:cf:63:1f:f9:1b:b0:41:18:fb:21:
80:87:eb:83:66:7e:df:59:35:15:be:d8:8e:50:ef:19:a7:57:
33:26:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:32 2026 by rpki-client