Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: 0WdCK5sdoNOxTqjEYKmN736rdYeJyCkgEkDlPYFTx48=
Subject key identifier: 34:68:E8:B1:1C:74:EE:AD:88:EF:CC:06:6D:D8:0F:A3:9E:63:30:31
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019D25F17072464AF1D246F403203A69168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 0189
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: Tdn4Y1HEog6z9DizPDC2OP6ZAIplwCbk0IHypIAgv8M=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:70:72:46:4a:f1:d2:46:f4:03:20:3a:69:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=3468e8b11c74eead88efcc066dd80fa39e633031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:d5:b4:ff:b3:e7:84:ec:5f:44:40:b7:af:
7e:10:95:ae:6c:e2:e4:87:3f:68:2b:6c:b9:99:b3:
76:55:25:80:14:04:ce:1d:47:e4:e0:1b:43:b5:57:
c3:61:f3:96:9e:8d:b9:3e:3c:f0:95:12:ee:61:07:
c5:c5:c8:9d:4a:fd:f3:79:05:7d:a2:3a:4f:3e:d5:
a1:61:b8:03:3c:d2:41:34:bd:cf:2b:a0:d3:95:6b:
29:c5:8e:57:51:aa:63:c0:7a:ce:25:a0:10:62:f4:
2e:50:11:09:93:82:4c:0e:d9:1b:d0:e0:a0:45:10:
c0:98:26:51:de:fa:a3:8e:49:08:d9:82:2d:c4:9d:
1f:b2:95:a7:5b:3d:c6:71:c3:fb:c5:13:54:f8:0e:
af:eb:93:3a:f0:04:ec:52:56:8b:32:ea:00:30:5b:
46:da:a5:cc:18:d9:f6:61:65:5b:1d:95:1d:f7:c9:
e1:11:c5:ee:03:f9:ab:cc:0b:cc:fb:97:88:36:62:
c8:06:4a:ef:fa:e3:ce:b1:95:89:07:ec:6a:2c:fd:
0a:78:47:79:c2:7e:8e:83:5a:85:15:01:24:b6:b2:
75:90:99:e1:93:ae:d1:5f:4e:2a:33:ce:17:60:d3:
ba:0f:ab:8f:4f:ad:61:14:76:ed:7a:60:df:4d:4d:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:E8:B1:1C:74:EE:AD:88:EF:CC:06:6D:D8:0F:A3:9E:63:30:31
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:df:90:12:f2:84:9f:57:32:02:ec:0b:b9:d2:5a:18:24:
e5:95:e9:8d:e1:34:f7:91:de:e8:c9:61:50:a2:c3:42:dd:c2:
ce:59:b2:ed:25:d0:6c:5a:dc:5f:5a:ea:7f:01:d7:d3:79:dd:
74:37:35:8e:7f:e1:9a:0a:af:24:d4:da:64:1d:c1:f1:3f:96:
1c:1b:0e:59:ec:0d:2c:9e:bf:51:25:ff:58:53:a5:ae:58:79:
42:75:0e:bc:ed:86:0d:b2:99:0f:33:6f:5e:65:09:58:7e:9b:
d3:e0:d9:e1:cc:13:6e:8f:6a:b3:62:69:a2:79:35:07:36:5d:
b7:13:02:7a:7e:42:75:eb:fe:c2:d7:79:f9:0f:a1:39:4f:73:
4d:92:85:80:a6:cb:38:a5:b3:42:1e:66:97:29:54:31:42:f7:
a6:ab:92:c8:84:2c:8d:ae:e7:10:3d:89:27:12:c5:76:c4:9d:
1c:13:1d:77:b2:96:c1:54:1d:eb:52:df:bc:7d:6d:2c:8a:86:
eb:c3:97:2a:91:1e:2b:45:38:28:6f:93:8b:4e:8b:a4:c3:6c:
2a:d8:d2:03:2b:7b:3a:a7:c5:f0:1d:84:14:d4:d6:79:81:d4:
8a:13:72:70:9d:2a:af:22:ad:12:72:1b:61:d3:0e:8d:28:e9:
ec:e9:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:12 2026 by rpki-client