Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: Xt5NF6J5lEggFcJn5zdMqBnIH9crSqI5102RzpSWkdY=
Subject key identifier: 7A:52:2A:95:7B:C3:83:B6:AA:1C:E8:7A:DE:04:67:88:54:F9:47:54
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019D28F241E354A3BC58657218F9DB5CE1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0F1F
Signing time: Thu 26 Mar 2026 07:00:58 +0000
Manifest this update: Thu 26 Mar 2026 07:00:58 +0000
Manifest next update: Fri 27 Mar 2026 07:00:58 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: FWbqT2Wf5pEmWXxhrzyFcdtfjJUnivFe3Raj35e8Gj0=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:41:e3:54:a3:bc:58:65:72:18:f9:db:5c:e1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Mar 26 07:00:58 2026 GMT
Not After : Mar 27 07:00:58 2026 GMT
Subject: CN=7a522a957bc383b6aa1ce87ade04678854f94754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:dc:7c:d7:65:1e:25:cf:d7:cd:48:51:de:
9c:5a:01:88:e2:b5:6c:a6:22:07:db:16:c9:9f:41:
65:51:56:b4:13:d8:dd:eb:3b:2b:61:38:3f:38:d6:
0e:c7:69:4f:d0:49:67:41:2e:24:95:04:e9:66:58:
8c:e8:10:75:b2:10:7a:d3:fc:b1:00:19:2e:60:04:
3e:bb:65:05:67:61:80:40:c0:2f:ab:3c:88:ec:a0:
5e:e7:c0:b4:9e:48:e7:21:bd:f5:a9:a4:13:0b:a6:
cc:8b:24:73:f4:34:95:3e:d6:48:0b:ab:94:25:aa:
44:68:99:e9:d6:d5:28:d2:92:75:85:fc:c3:35:86:
09:6a:e9:91:c8:6a:53:96:b7:29:cd:cd:ce:0e:91:
b5:45:a4:d9:8d:49:75:00:d5:1a:a7:59:55:77:e1:
30:53:18:52:21:d3:18:61:1f:f4:a3:0e:26:0d:ee:
4d:a3:14:bb:51:34:86:5d:5c:a1:d5:d5:e5:34:f0:
4c:4f:3f:4e:a8:4d:67:31:b5:86:6d:2e:7a:a4:f7:
f8:4d:80:14:92:3d:d2:31:30:96:e2:a8:dd:27:36:
4f:13:c0:0f:e7:f9:fc:82:84:3b:a2:dc:70:e8:54:
52:79:7a:c5:73:ae:35:8e:b6:0c:b9:09:64:06:9d:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:2A:95:7B:C3:83:B6:AA:1C:E8:7A:DE:04:67:88:54:F9:47:54
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:4c:73:39:a0:0a:4e:ef:17:d4:d2:f3:d7:db:1f:77:96:
72:90:c0:14:5b:d5:62:08:56:1c:1c:06:16:dc:68:84:ef:7f:
b5:ce:35:be:90:78:e4:48:1c:cd:c8:b0:49:18:45:17:a2:0c:
fe:93:bb:75:e8:61:22:eb:3d:d8:30:b7:e2:1b:f6:9d:a4:1b:
20:c0:8b:44:c7:07:81:d1:8f:04:95:07:ff:50:90:be:15:c8:
9f:d1:e3:97:7d:7c:2d:ab:fa:68:74:94:db:ca:d0:29:b2:55:
f1:a8:79:5e:a7:a9:b6:25:d7:0f:ec:a8:bf:a1:d4:eb:3e:10:
41:5f:92:12:e1:dc:b6:68:cb:19:1e:a9:c5:ce:61:59:06:7f:
c1:d6:a1:ef:54:32:7b:b7:05:b2:28:54:49:bb:38:a5:aa:58:
65:c4:50:c8:41:bf:c9:32:92:40:18:f2:4f:f5:ce:80:74:2b:
af:da:e5:a6:66:79:f8:e4:04:8f:41:f0:01:b7:b7:6d:3d:8e:
ac:f3:89:b9:7f:8c:a6:72:79:18:df:ab:57:56:44:bf:0e:4b:
8b:9f:91:e8:03:1f:98:bc:53:2f:4c:b7:c6:f4:4c:1b:1f:1f:
a2:9b:2a:52:2c:6c:ab:6c:59:b6:bb:14:23:21:b8:74:ad:3a:
d9:c5:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:23 2026 by rpki-client