Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier: q5ipHTxWRDQwUbk/L/eNo1QAH0pphv9Nl+KUcccgd9E=
Subject key identifier: 6C:B8:6B:9E:91:76:71:09:70:7A:B1:C4:F6:76:93:CA:DE:6E:CC:18
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 019D27E006D76117F22318014D45650224D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number: 0D07
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: +7tBUPZRs2ZLQb/BftSTobD9eZn3m5ug8MlE29aitxQ=)
2: 7gKbnCeEeFU9kgMWCw85IQnBGJs.roa (hash: BEos/oIubVJfuhxS0jxVgCoi+2xWKG0c7X3weGq3uEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:06:d7:61:17:f2:23:18:01:4d:45:65:02:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=6cb86b9e91767109707ab1c4f67693cade6ecc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:b2:1f:b8:70:8c:bf:5b:6b:5e:69:1d:8d:
6e:14:06:5f:ac:d5:0e:33:1a:21:24:0a:f3:36:d8:
5b:5b:a8:b5:f4:a0:ed:bb:20:42:5c:37:a6:d7:02:
f5:cd:5a:fb:e1:a0:64:d3:6e:05:a7:66:ec:5d:f5:
01:05:e4:ae:d6:29:67:8b:1b:4d:e1:a8:f7:1c:47:
dd:f0:6e:3c:26:be:86:da:0c:b1:68:46:45:25:28:
06:9c:2d:dc:19:2f:0e:73:9d:5c:8d:1b:a2:cb:e2:
80:06:71:c7:05:e3:56:ec:17:bf:f1:10:b8:e5:bd:
54:ef:59:ec:87:a9:94:60:56:a2:99:2b:30:91:6f:
aa:a3:9a:6a:9a:20:c2:6d:51:d8:57:2b:30:5a:4b:
90:fc:ca:2a:7e:db:c3:3f:d7:8b:ed:83:32:d8:53:
b2:55:3b:d6:1d:a9:3b:29:64:ac:5c:6f:ee:06:59:
3a:f5:f0:18:f2:7f:4b:15:7a:10:63:d3:09:48:4a:
fb:2b:ee:58:7d:61:8c:66:4c:00:57:a4:42:78:ff:
f0:1d:92:e2:2a:ef:48:34:c0:44:74:ed:75:39:5b:
fc:d5:86:f7:35:54:23:7d:b1:b8:23:47:51:d9:64:
93:3c:34:f8:3a:ad:dc:d2:85:60:d5:56:be:83:bc:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B8:6B:9E:91:76:71:09:70:7A:B1:C4:F6:76:93:CA:DE:6E:CC:18
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:ea:c9:df:ab:a9:90:c9:fb:bc:b9:7b:6c:2e:f6:40:b6:
05:68:1b:73:90:2f:b9:83:6b:20:f4:ce:3a:e6:e4:6d:77:ce:
06:39:d5:80:49:a1:b6:4a:56:11:d5:aa:d8:ad:6a:66:c2:ea:
e5:26:99:7a:f8:0e:e6:ef:52:49:35:96:32:02:51:82:a6:27:
0e:67:89:36:f0:8d:7b:80:c7:f2:dd:b1:97:b8:dc:dd:99:a9:
d1:26:7f:17:b5:4a:29:94:a9:fa:74:f9:20:1f:36:ec:a8:55:
8c:98:c9:c9:06:c4:60:29:ca:fa:69:b4:94:af:1a:f7:80:e3:
ac:d6:ba:3c:86:e6:c1:07:b4:9f:e6:75:58:18:12:62:1e:5e:
f2:d2:32:d2:8c:25:82:f2:fd:e1:3c:82:86:bd:81:0d:ad:f2:
43:2d:87:d5:5a:71:6c:9e:4e:75:0f:e3:0f:6f:98:76:26:86:
3c:de:62:d5:fa:a7:75:89:c5:6d:e0:d5:d6:fe:09:a7:45:79:
00:09:9c:4d:1d:96:e7:b0:4b:9c:b0:11:a4:60:a9:39:52:92:
40:42:98:42:0f:b8:bf:69:b7:7e:7d:d0:a3:22:8a:95:8b:14:
50:2b:d1:61:59:2b:eb:bb:3b:57:03:eb:12:b7:29:42:10:c2:
90:29:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:23 2026 by rpki-client