Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: SbiM9OdnhXsokgdV9pdeS1lTwMN0qK9wqqHzfLZVUDs=
Subject key identifier: 8D:53:33:12:8E:75:82:13:B8:89:46:CB:18:CF:5D:85:03:F9:C9:50
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 019D28F2F7724D73DB880B937842BC0E0318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0FA2
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: IBug5qq5psPakRo5H2sBdu36EHsSzubYG7O3JYYXW5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f7:72:4d:73:db:88:0b:93:78:42:bc:0e:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=8d5333128e758213b88946cb18cf5d8503f9c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:e2:27:f5:40:e4:19:97:8e:e1:ed:30:cf:
f3:a5:23:db:b5:dc:2f:a9:3b:a0:23:19:bb:59:6d:
2c:b0:89:98:6d:2a:bf:7e:a7:a3:ad:64:63:5f:c4:
7b:ca:42:0b:bb:d4:96:4d:d0:71:f1:d4:07:71:4d:
73:f3:b4:2d:72:53:e0:a5:c0:68:e6:26:73:63:5e:
ac:ac:7f:98:c8:ee:83:2f:01:3a:87:6c:2a:96:ba:
e9:87:02:9d:22:3e:04:25:ce:f7:59:9b:97:52:e7:
25:82:c6:f5:13:13:70:a2:71:00:1b:05:82:8e:41:
0b:82:ed:32:ef:50:cd:34:8b:29:41:1b:e3:52:c3:
40:ae:11:9b:f7:7b:5f:fd:34:ad:e5:93:1c:35:d9:
6a:f1:da:64:ff:6a:d8:7f:3a:5a:df:b1:e9:1c:e8:
b0:c2:1d:c9:6e:52:61:0d:dc:06:70:e7:19:2c:6c:
ff:84:ee:35:83:33:3d:a0:1e:36:3a:d9:90:f0:97:
57:d7:cc:f1:88:5a:2f:e7:c7:1f:87:7d:22:30:da:
65:15:ef:4f:f7:88:da:63:bc:15:e0:ce:67:03:00:
56:10:ca:19:73:da:61:48:92:a1:1e:6d:86:7f:71:
4a:c9:9f:df:54:be:68:62:26:51:1c:94:a9:94:0d:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:33:12:8E:75:82:13:B8:89:46:CB:18:CF:5D:85:03:F9:C9:50
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:08:f8:32:6b:32:89:ef:e0:ab:66:7c:ec:de:6a:ba:94:
d5:93:ef:01:fa:bb:d9:db:10:cc:6e:6c:94:e9:88:ac:e9:8a:
79:19:0f:96:f6:e4:a8:ce:9c:f4:74:7e:69:41:42:b6:a8:52:
02:75:b7:a1:4e:56:d1:1c:5a:f6:4c:01:0b:fe:22:24:e7:b0:
12:2a:98:03:cf:42:21:27:f6:d5:28:ea:d4:fc:51:e9:fe:24:
da:6f:aa:db:29:0a:b5:93:be:84:91:00:0b:52:b7:89:c3:d2:
3b:2d:c7:2a:8c:2e:b2:a0:0d:9e:59:d0:b5:05:d8:9f:27:86:
55:63:f1:3e:38:3c:64:6d:82:be:26:52:a1:07:bf:60:08:d5:
c1:29:12:cd:59:b2:57:f7:2e:bd:74:67:74:25:9e:82:a0:e3:
2f:78:72:c9:e2:1f:04:c8:3b:5c:23:6f:2c:ea:13:7a:76:78:
59:50:bc:d5:bb:1e:00:42:45:e9:aa:cf:81:9d:7b:9b:22:62:
60:0a:54:84:1f:ad:dc:50:e3:29:59:30:07:a6:1a:fe:c6:60:
ed:81:55:6f:9a:94:21:0b:ba:1e:05:4f:ff:77:57:8c:23:27:
67:c8:77:1f:ba:ad:fb:04:46:c0:bc:54:95:e8:88:73:86:42:
e6:78:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:17 2026 by rpki-client