Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: kOjsduowi2WhOwdTSIkAuVENrSMi7A4yNaxXdc+QEhE=
Subject key identifier: F8:EE:E1:F4:FD:50:FA:9B:F4:A2:63:02:FC:45:46:D7:D8:09:33:69
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019D262837B9CD9D611DD647F2ED0E4F4175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 1578
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: amrk3D7xYYxk3CLf08sL1so6rn71o3IT8Vj38uzA0us=)
2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:37:b9:cd:9d:61:1d:d6:47:f2:ed:0e:4f:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=f8eee1f4fd50fa9bf4a26302fc4546d7d8093369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:dc:96:b3:4d:9a:57:8d:09:43:96:b2:86:
da:f1:b6:a6:2e:89:93:bc:20:84:cc:be:b1:d0:e6:
b9:68:48:93:16:ea:ec:c7:6a:54:dd:28:ad:34:7e:
c6:f9:c9:ee:64:8f:28:6e:87:9f:fe:5d:1f:fd:1b:
09:9a:e8:31:02:c6:1c:f5:44:19:ae:4b:b2:97:cb:
db:37:ff:d0:26:b5:c0:f0:4d:19:89:c3:75:20:29:
6e:af:62:52:f7:82:aa:0c:db:00:90:3d:da:d2:10:
de:88:3d:52:1d:9a:56:db:9d:ac:50:37:3b:74:9c:
77:41:69:d9:91:16:fd:21:40:89:d5:12:9d:30:0c:
e1:8a:91:ce:af:1d:3e:39:bf:2c:b5:0d:8b:91:b5:
14:80:84:8e:e7:2f:ab:b7:c3:eb:a7:db:6e:3d:eb:
22:6c:31:83:8e:74:43:47:00:cf:46:23:cb:71:ad:
37:c1:01:08:c3:8f:75:f0:59:93:47:31:c5:35:00:
8f:f7:e6:85:59:16:cb:20:0b:d8:ff:2e:0c:5d:87:
1d:6a:b2:fe:c6:ba:a4:fc:73:e2:ce:40:a3:f4:16:
41:67:f1:85:49:53:84:23:7c:c9:11:65:50:b2:34:
bb:78:c3:c3:ee:23:0a:61:bc:34:27:c9:93:c0:4a:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:E1:F4:FD:50:FA:9B:F4:A2:63:02:FC:45:46:D7:D8:09:33:69
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:46:16:3d:8a:b1:b4:45:7c:dc:45:b8:0d:ff:a5:d7:d9:9d:
be:2f:bb:72:dd:6a:ef:86:e7:5f:db:e8:06:bb:dc:88:10:59:
67:38:63:cf:5a:36:e7:cc:fe:5f:39:c9:fb:be:45:ff:49:d6:
d5:90:db:37:27:0d:5b:49:ba:19:65:93:39:f0:eb:e3:17:c6:
16:f6:20:10:82:a8:63:c4:56:59:c7:b7:d6:32:b0:f7:ad:48:
5e:40:b2:7e:c8:1e:e4:ca:e4:d0:1e:65:42:81:2b:61:2e:32:
5c:4c:30:22:0e:b6:9e:0a:6f:58:6e:34:f8:63:07:67:f4:c5:
28:ba:83:c2:ec:94:66:fc:dd:13:cc:a5:d5:8c:58:3b:86:5a:
ee:36:a6:45:0f:88:c1:2c:6b:3f:c5:4d:11:17:4a:db:4e:cb:
8c:46:7b:53:c8:55:73:f7:46:10:68:3a:84:b9:da:b8:6b:f4:
13:f4:f5:2e:51:4c:75:e7:88:10:67:a7:52:7b:4a:1d:51:fc:
05:e0:a5:53:53:da:c5:f4:9d:cf:29:f7:de:3e:e7:e3:9c:06:
a1:f4:24:d5:a9:13:23:37:7f:39:57:ce:5f:9c:34:a8:73:e6:
ca:43:f9:aa:94:2f:c6:8d:3f:dd:6d:ae:eb:9a:68:b3:8e:19:
50:ed:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:35 2026 by rpki-client