Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: x/L/MP8dfZW/77vUoTNoL+Km2Skca3nXWTbEd0z3mi0=
Subject key identifier: 7E:49:24:ED:35:A6:19:58:9C:05:57:F4:84:74:86:31:CE:59:6A:6B
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 019D2583AD49C1CC783EFE7121E3A7D4453E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 1321
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: Xot9CT+KBRcHpgfMoM/+HRqW33Zp+ybE5TMnLrJIumo=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ad:49:c1:cc:78:3e:fe:71:21:e3:a7:d4:45:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=7e4924ed35a619589c0557f484748631ce596a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:49:de:55:9b:bc:69:d1:8b:b9:16:5e:bf:
54:32:66:15:e6:7c:54:d8:33:e3:4b:fd:36:7b:79:
f9:40:90:e4:bc:0a:74:5a:53:e1:de:12:2c:19:f1:
c6:86:97:3f:b5:f3:9d:0b:77:de:b6:c4:b2:fb:78:
03:9c:aa:fc:d9:d1:0c:5a:66:6b:5f:48:4b:96:3b:
81:e0:72:dd:11:60:22:9b:60:06:30:a0:a1:9e:ce:
c1:3f:65:47:be:69:6e:05:8c:e0:cc:3c:ef:5b:fa:
9b:82:5e:6f:1d:92:63:7b:81:dd:5c:8f:dc:02:18:
40:41:c5:5d:2a:a5:03:9c:ac:d2:01:60:2d:9d:dd:
73:23:18:32:f7:9b:9b:d5:19:5b:b7:af:50:71:34:
ac:9c:75:15:0b:a5:19:7f:f8:2d:6e:67:bc:0c:ff:
35:ca:ee:e7:3c:b7:f4:f3:a0:a3:38:04:db:68:98:
e3:71:38:44:db:b5:5f:70:1d:8f:12:c6:27:f4:9d:
63:f4:13:6d:52:82:6c:27:27:0d:34:90:61:ef:80:
61:9f:62:9e:cb:9b:59:a1:5b:c6:3f:4c:f5:c8:2d:
13:af:43:67:30:7b:d7:a3:1a:2a:e7:06:55:83:43:
8e:27:d4:84:54:93:52:dd:b4:c5:c7:73:4b:76:69:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:24:ED:35:A6:19:58:9C:05:57:F4:84:74:86:31:CE:59:6A:6B
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:b2:d9:cc:31:ed:b1:38:1d:72:2d:37:b0:a7:d4:bc:78:
e2:8f:a0:87:cc:f9:3f:0f:d9:bd:93:b6:9a:d4:b7:68:27:ee:
7d:69:32:f3:c4:43:20:2e:63:36:5a:f3:7a:11:19:f2:15:aa:
22:71:b7:85:46:ad:60:1b:f4:c7:79:82:bc:f7:c8:97:7c:94:
97:14:69:70:98:c5:43:1d:f8:67:be:db:b4:27:2d:3b:3e:0f:
3b:95:5f:8f:76:3f:af:72:7a:b0:b2:9f:51:b1:1f:a8:3f:ba:
38:09:5d:9f:3e:56:07:62:eb:2f:68:91:4a:57:b3:a8:d7:0e:
7a:06:7f:05:a5:16:31:5f:5c:cb:bf:67:c2:14:24:22:86:e8:
0d:e2:e3:62:b7:09:17:b5:cf:c7:96:f3:ec:8a:0a:ea:e0:1f:
ed:fc:73:eb:54:47:32:fe:fd:7b:0e:12:27:03:2f:49:30:f5:
66:d1:3d:f7:a4:3a:de:c2:5e:f2:0d:6a:25:09:d4:86:c0:16:
5c:13:c4:10:ff:c1:a8:6e:c5:1f:73:28:a4:20:f4:38:38:3a:
99:a4:6c:23:d1:d2:41:ab:ba:a9:3d:ec:03:99:aa:59:68:a1:
d0:0c:00:3a:ef:f5:74:d7:98:57:94:01:a6:a4:c6:d1:09:30:
13:11:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:05 2026 by rpki-client