Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: HqxKc4tJgTpfTBnlJ5lke+IJSVqGIS469tgFhMKvm4M=
Subject key identifier: 55:D3:77:47:FF:F3:43:33:92:3F:47:79:5F:AF:44:B9:8B:7C:29:1C
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 019D2A72BE3BA59ABE565253405CD9B384F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 0841
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: Ym3jvPsib85y/VESBOX46zkk7tu/5D3Yaott87oEjk0=)
2: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (hash: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:be:3b:a5:9a:be:56:52:53:40:5c:d9:b3:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=55d37747fff34333923f47795faf44b98b7c291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:bb:53:11:88:60:19:11:92:d2:ad:23:c9:
9d:00:de:a2:82:49:7b:27:5d:71:ba:8e:e3:ac:0d:
be:35:6a:cd:0b:b7:50:b2:70:91:98:72:6d:13:20:
bd:3a:53:f6:47:98:a8:0c:5d:f5:ea:25:f4:16:73:
76:73:d7:46:30:65:c0:df:ec:91:07:df:97:f8:ef:
37:36:d7:4a:70:b2:17:ec:23:0d:57:4a:64:10:64:
ee:15:09:d2:17:97:c9:87:4f:8d:0e:fd:d0:98:15:
8d:96:be:1d:96:6e:98:ea:a6:b8:55:0e:4d:17:50:
4a:2b:f1:32:ad:04:11:4d:94:34:49:bb:59:bc:47:
09:cc:65:07:54:c6:96:02:a9:af:a6:f5:74:e1:dc:
8a:be:c6:21:04:1e:97:61:a2:b2:c9:cb:50:3d:a1:
9c:0f:a7:9a:d8:70:44:85:a8:77:a5:84:f9:b4:84:
a5:35:84:ed:61:c7:71:21:e8:01:09:f7:6a:c4:52:
ce:1f:7f:6e:c8:78:34:1d:82:dc:f5:c9:6b:69:63:
ed:2e:16:09:9a:a9:a2:c1:99:3d:88:8a:4a:16:89:
0b:ea:7b:d5:3e:96:6b:07:40:f7:50:77:ee:eb:1c:
a3:25:a6:d9:c3:9c:6a:f2:93:df:db:4d:8c:64:b2:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:77:47:FF:F3:43:33:92:3F:47:79:5F:AF:44:B9:8B:7C:29:1C
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:6d:3e:49:8d:0a:f2:d3:e5:3c:32:88:10:61:c7:cd:34:
e6:fa:a8:c6:b9:6c:d0:27:80:16:b2:30:85:9f:04:c0:25:3d:
1d:9a:6a:c3:1d:33:83:50:18:fa:da:2e:75:16:43:df:32:57:
11:ae:df:37:bd:2c:17:76:30:e1:ab:0e:9d:99:20:dc:b5:5e:
bc:7a:a0:5e:50:7e:d5:8c:88:a1:6d:35:0a:f4:cf:14:a9:bb:
55:48:4d:0c:c3:f7:3e:a5:9f:9b:aa:a4:fe:29:fa:33:a9:8a:
05:49:9c:92:95:a0:bb:80:99:bd:7a:a6:d8:7c:14:3c:be:ed:
a5:f2:81:41:62:63:44:e3:c8:d2:ad:dc:8e:b8:9f:be:e3:88:
49:2e:2a:18:a8:1d:99:a2:3a:81:70:bc:1d:c1:9a:40:33:1e:
c2:55:0a:a2:68:01:06:ad:73:24:2f:bc:3a:fa:3d:b2:45:2d:
e8:06:de:1c:5c:c4:96:24:5e:8a:19:61:14:2d:ba:0b:70:e0:
02:8e:bb:87:6f:02:16:9b:ec:de:76:70:00:76:52:c2:50:85:
3d:80:ae:0a:76:8c:6f:74:04:bd:88:15:38:47:ec:88:da:c3:
20:91:07:d0:0b:65:6e:96:41:20:a0:c1:82:fd:63:23:b3:0e:
73:91:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:59 2026 by rpki-client