
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: 361vrTczI1Y67cCmHL3cARKyleft8tPol/pHEf1aGRw=
Subject key identifier: 14:96:BA:FD:92:8E:90:47:51:EB:E1:3D:76:F5:D3:08:E8:D9:36:0B
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019D2A04A92705F26F67EFE65D50F38DA73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 110F
Signing time: Thu 26 Mar 2026 12:00:41 +0000
Manifest this update: Thu 26 Mar 2026 12:00:41 +0000
Manifest next update: Fri 27 Mar 2026 12:00:41 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: YS5rhuF3ouEFRhtCSKL7ogHnTiEPt2BjubkQf0g3dsE=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a9:27:05:f2:6f:67:ef:e6:5d:50:f3:8d:a7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Mar 26 12:00:41 2026 GMT
Not After : Mar 27 12:00:41 2026 GMT
Subject: CN=1496bafd928e904751ebe13d76f5d308e8d9360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:fe:2a:26:46:8d:d0:a0:aa:73:ab:19:27:
a6:6d:79:63:04:04:e7:7a:87:ac:2b:5b:28:37:f3:
09:df:fd:eb:61:3f:76:a5:46:fe:61:1a:16:d4:86:
ba:25:9a:1a:d1:22:4e:00:ed:0d:50:7a:05:e6:25:
cc:78:d8:25:8d:1d:53:ff:d0:f0:d1:94:ba:f2:1c:
d6:4b:1f:34:ab:c5:9b:0c:b2:6c:84:a5:63:84:de:
b3:a1:d5:7e:2b:42:4e:ce:70:94:32:ed:47:e6:49:
d8:1b:a2:47:fd:3d:86:6c:d6:61:0b:4d:e3:13:c5:
41:34:11:9f:6b:24:75:48:24:fe:23:1e:3d:9d:1a:
cf:f2:11:92:26:0e:6b:f7:f1:90:ad:ef:9f:ec:e8:
dd:23:bd:f6:79:1a:c3:c9:c4:2b:d3:90:14:a8:23:
96:3d:b0:8f:50:8c:d2:37:bd:85:46:73:94:3b:98:
e6:9c:86:fe:c3:23:1d:91:8f:60:cb:44:d0:5c:17:
67:7a:3d:1c:eb:c0:64:73:28:3e:50:e8:ad:b0:a0:
ed:4f:5d:b6:1b:7e:43:19:6f:24:94:49:a6:06:4a:
c4:c2:41:b2:57:d0:48:c0:54:6f:aa:dd:f2:a7:42:
82:c1:9d:8b:8d:77:e2:5c:45:d7:32:1f:33:95:27:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:BA:FD:92:8E:90:47:51:EB:E1:3D:76:F5:D3:08:E8:D9:36:0B
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:4e:ab:b0:b9:27:97:0d:c2:28:af:54:9c:bf:84:93:21:
ef:c7:c9:3a:b6:6b:a0:92:ee:2a:d5:bc:a4:40:1e:d0:25:8b:
c5:99:9e:52:6e:18:78:0a:c5:64:ea:33:8d:48:0e:91:67:34:
ba:0d:4e:ea:32:55:04:5e:35:a8:81:bd:7d:a5:f9:52:37:cc:
63:de:03:cf:91:36:4f:08:25:5c:14:1a:1e:51:12:e9:21:ad:
2f:fa:f7:65:74:5b:37:4a:9a:b9:47:82:10:11:d2:70:34:47:
6a:2b:da:ff:0c:d5:a5:23:9e:70:25:e1:cf:b0:e0:18:a8:9e:
27:a8:9b:c2:12:b5:68:9c:84:2b:6e:5c:da:77:65:b7:61:6c:
1f:c4:9c:23:33:16:d9:d4:49:ac:50:4c:65:ab:36:fe:00:a1:
81:5c:6f:fb:9e:b5:8e:c8:bd:75:d5:f8:0d:b1:9d:99:1f:b0:
88:49:69:e2:3a:9f:e5:53:16:26:5f:56:65:f1:45:0a:9d:d4:
58:18:70:df:09:d8:ad:37:14:3c:53:50:b6:7d:af:e9:52:01:
1c:0d:92:a8:ff:de:42:f7:35:3a:e6:a4:1f:4f:a1:12:b3:08:
ba:22:22:9e:30:a1:fa:dd:47:01:0b:f9:60:2d:3d:e0:2c:ad:
81:f6:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:13 2026 by rpki-client