Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: vlElnFkhS+63158wt9d4zsILkD9fE1exY/rBzFw2YTc=
Subject key identifier: 31:D0:C1:3B:A9:52:8D:12:BC:4C:0D:1B:4F:A1:C9:31:E2:6C:E0:B7
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 019D27E02DDFA84623FC0030ED5AB5F8EFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 156D
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: hSI4wFtMYLE7+J84rZfBjHf4mpP9tEK7LpdD7C0BLGs=)
2: V7cnWr0yTia_O83ZQ8f1SQpxbe0.roa (hash: V0l2BUlDEC1rED6uk06tkHISjZ000fzVHFtSK8PSDC8=)
3: g6jJ9UyqD8gZUMIuEEYXLhGmn90.roa (hash: Vvh+6n3XDAJwELvj5IwGzupocif24c58GMylsOXJ+aM=)
4: i_ltRwYEioUiSqM_N0IGaAXBwww.roa (hash: i9BjibDTOdKVln71YPwL1G7OdUxiUoFhFjozV67L+Z0=)
5: wQFCgIWKeHWn0AoEBFccOjnC2TU.roa (hash: JB49W9zliA5p5Mlat2myJvjej3ubOs2xynZ5e8qh7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2d:df:a8:46:23:fc:00:30:ed:5a:b5:f8:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=31d0c13ba9528d12bc4c0d1b4fa1c931e26ce0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:de:05:3d:a5:44:75:6b:69:52:59:95:9b:
f6:09:a4:ec:ea:e1:6f:d6:1f:28:88:6d:2c:ff:7f:
c9:f7:ad:92:06:89:47:31:15:ae:59:3d:86:8c:3b:
20:8d:fa:c0:ca:7e:e2:3b:f2:9d:59:4d:95:ca:3b:
cb:0d:a0:8c:82:4f:23:74:67:a7:f5:f8:6b:b2:76:
db:e0:56:4d:1f:4a:39:1b:2f:47:8d:52:e2:21:24:
93:42:35:ef:f1:2a:c8:0b:d9:70:a1:e0:6e:12:5d:
79:7b:3f:7b:d2:b7:ff:eb:d1:ba:43:09:09:5b:36:
7f:72:26:fe:bd:16:d0:eb:96:ba:50:1e:54:08:04:
27:5d:31:ed:94:24:9a:54:e6:30:3f:9a:a7:32:84:
75:ab:25:fc:db:9d:bf:bf:26:fa:11:cc:61:21:29:
4a:30:b3:91:60:40:f0:cf:75:a1:41:0c:67:4c:51:
8c:75:68:70:55:9d:d1:02:a0:8b:4d:74:0e:f2:a3:
cf:57:af:5a:ae:5f:26:c7:49:62:e8:c9:7b:89:0f:
a9:23:61:a4:c8:8c:cd:f6:fd:1a:d1:e8:ff:2b:e6:
85:9f:40:48:ea:34:df:fb:2c:fc:62:ba:91:9c:9a:
e2:98:cc:1d:76:40:f7:69:fb:83:7d:0d:34:34:90:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D0:C1:3B:A9:52:8D:12:BC:4C:0D:1B:4F:A1:C9:31:E2:6C:E0:B7
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:2f:9e:68:f7:47:c4:f8:50:2e:ba:4a:ce:8d:15:b6:f0:
a4:e1:5d:4d:5e:e6:ab:9e:af:c5:7e:42:95:a1:07:87:c0:de:
d1:27:07:f2:e8:c3:c9:57:f2:46:58:60:b6:23:c3:08:93:15:
f0:c9:b2:95:fe:90:85:39:7f:7d:fd:78:11:b8:3b:c1:eb:3f:
ad:ae:04:54:9b:ed:c1:8a:5e:77:0d:0f:11:7f:b2:af:ce:21:
e8:a1:0f:18:4b:26:0d:2a:8b:98:09:6f:ac:c2:4e:a0:3b:7c:
0f:07:1a:27:d8:93:39:c7:e4:d0:37:1f:9f:72:29:b2:df:40:
19:2f:4f:40:12:f5:9e:87:ef:78:24:0c:88:3d:5e:51:81:63:
a7:76:ea:4c:45:29:fc:36:99:3a:10:1d:fe:61:a3:bc:9a:62:
d6:94:21:bb:ab:bc:64:8a:36:b7:e0:53:62:15:ba:07:db:04:
85:40:37:e1:ff:95:10:ab:e8:47:ac:00:7b:ca:b5:22:69:10:
b1:9d:a4:55:2f:16:25:58:bb:10:79:1b:98:f5:7b:61:d6:a9:
bc:04:b5:b8:a6:d7:13:51:2e:73:91:bf:ae:8e:b0:a3:bd:fc:
2b:86:1b:d6:5f:c8:cf:72:42:f9:54:a9:c6:4f:f6:fd:da:7a:
87:f3:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:05 2026 by rpki-client