Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: VYDgCGR2kPntJjpc26vspy6rYbqMiFHtQRE3B0hjw5M=
Subject key identifier: 11:E3:9F:87:F5:B3:B4:DE:FF:9E:32:D5:94:23:62:46:5B:44:57:4B
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019D2704A157C8E633B77CFD69B0BEE7FE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0BAD
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 1-h07jUm-02q1q7k5iFHSAwPoCOY.roa (hash: wYacQ3/0cWpPvmvpOGx2amNX3ChOHhpv2IkMIQcd1kU=)
2: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: GzQyuF0c4yJDt5hK4zsIGqiwosZMLNAmtp6buoW31DI=)
3: 8n9eZIW7ANGT-kZFn82_ark7Uv4.roa (hash: iSzxnZr5liuYDapFFff4VPiBs6DGqwu/5GYq/65KGeY=)
4: MbxVurKYN8xqBXt4GCcNgnfIuiY.roa (hash: x3GDjgwgD1RnHIS+Ztov3aWczXJrFL3jnbKHq3Hp8xY=)
5: bUXJJvXZD8HG86LeZV98-RJ1Y8A.roa (hash: LD+kXEg0Yv3J8X5RNHtOf1eUf3fGuk+QTSdoYbzqlLc=)
6: dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa (hash: PRmyS7FYnGqapGRXhdp+LVcWuV+Zrh/jHa9470RQd+c=)
7: jXnaEvzPAKlwUURcuri_2EY0APE.roa (hash: bJ2+8fTTeF2ubi8NQ1u0/9fvglhy+2tBtDJvXGWQnEM=)
8: qALn9gqzSG2sWHjlwEpfBVz6XHw.roa (hash: /P0a4k08c7gRHw6tH90mR+C7VwWiM7eRL8Ct7d9zsTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:57:c8:e6:33:b7:7c:fd:69:b0:be:e7:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=11e39f87f5b3b4deff9e32d5942362465b44574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:72:ab:48:e9:22:6f:cb:c2:38:13:ee:0a:
46:17:76:84:b6:c3:6f:5c:df:70:a3:37:bc:f7:b6:
5e:5b:27:08:79:f7:0d:18:06:90:82:18:74:cf:20:
60:85:6f:23:c9:d5:57:15:c5:46:c7:cf:98:02:ff:
57:0c:77:7d:be:29:8d:5f:0c:7e:d9:4a:71:9a:50:
1a:4f:37:39:c9:18:44:58:30:db:3e:08:c9:0a:1d:
9c:aa:87:90:08:a5:31:b8:7c:b1:64:77:61:9f:2a:
26:f8:6b:ca:bf:1e:d0:c1:23:ca:8a:f0:16:22:d4:
3d:b8:7f:f8:8c:4d:53:34:b9:d5:dd:92:9f:69:c7:
fc:6c:91:30:b9:67:f5:57:e7:ca:96:62:0c:ab:0f:
58:4b:0f:df:7a:7e:55:5b:b1:61:dd:7f:6e:da:07:
87:e7:2d:b7:7a:89:2b:fd:de:90:4f:2f:88:ce:09:
17:13:5d:0d:d2:f3:98:8e:6c:23:95:9e:f9:8c:12:
8c:3c:88:b0:dd:cc:a2:18:77:f8:55:d9:a8:6a:16:
d6:9a:a2:30:7c:6a:6c:09:39:fa:00:84:96:f5:03:
6b:ef:55:dd:1a:7f:8a:77:9d:e1:e8:f6:c4:50:85:
0e:bf:db:57:31:f5:14:39:9e:93:8c:aa:93:6d:88:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:9F:87:F5:B3:B4:DE:FF:9E:32:D5:94:23:62:46:5B:44:57:4B
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:50:0f:23:3b:87:6d:c6:ef:c2:f2:8a:7b:be:6d:89:5c:
d4:46:c1:c8:95:86:e1:09:d9:15:89:cd:dd:f3:29:e1:26:75:
18:93:f0:bd:72:67:7e:a1:01:b9:ee:db:d4:cb:b6:10:84:4a:
6f:77:cf:e7:67:ba:a8:55:ac:10:f8:ad:00:ba:e7:07:63:6c:
9d:a5:d4:ee:24:91:bb:ff:4d:99:9d:28:3b:0b:74:4f:ec:c5:
e6:ff:42:e2:c5:16:3c:0c:bf:4f:d9:f0:4e:56:32:1b:74:3a:
0f:27:97:15:e2:43:99:ca:b1:b1:d7:de:06:4c:78:cb:9d:ed:
d1:5a:1d:7b:26:53:0b:01:fb:e6:98:9a:1f:81:91:2c:51:3c:
80:e7:5b:27:62:b5:fd:ec:4f:c5:e5:08:8e:d1:ce:87:90:b7:
86:de:55:71:15:f8:d7:60:b3:cf:85:a8:90:91:30:83:3d:d1:
26:32:24:30:25:44:6c:57:fe:07:cb:8d:1e:40:8b:1e:e9:89:
b2:f9:08:5b:71:1a:69:30:08:98:c0:37:fd:2a:17:cd:09:43:
2b:a6:cb:0b:58:75:59:4f:d6:a8:01:b4:24:51:2d:cd:53:5a:
2a:3b:8d:b8:bd:59:78:a1:7a:dd:7f:4d:4c:06:87:b2:28:fb:
57:3c:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:34 2026 by rpki-client