Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: oMfodQkMYwCaf0DdZ2mkJAHw55FNCkTLw6x/3wzxd0s=
Subject key identifier: 22:BE:3E:E0:BA:E5:2B:5B:8B:92:E9:D7:29:2B:E3:3B:95:43:55:FD
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019D28F2557BDBA03251D6C7309DEDCA5EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1768
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: HNSzY7Ruv41PIdepVTE+7+4AWA0Iqe5qucqa5HjkTuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:55:7b:db:a0:32:51:d6:c7:30:9d:ed:ca:5e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=22be3ee0bae52b5b8b92e9d7292be33b954355fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:a7:8b:9d:2b:e4:28:8e:a5:54:04:07:a2:
a0:0e:02:03:fe:6c:5d:6e:53:65:91:3c:0d:35:c5:
52:bd:a9:82:1f:c6:03:d5:d8:17:2c:00:5a:83:7b:
be:fd:5c:28:e5:0e:a9:7d:45:be:9a:cd:2f:93:62:
16:53:14:4b:c4:bf:18:dc:be:b8:f0:5e:d0:4f:bd:
7b:f2:97:6a:84:49:2f:20:48:5e:2d:2a:91:c3:c8:
2f:97:35:85:1e:0a:6f:12:be:ff:a0:af:0c:f3:3c:
ac:e3:00:9f:d0:06:3c:46:14:42:ad:cf:1c:54:de:
c5:5b:1b:1e:ae:16:25:79:0d:f4:13:73:5e:63:c8:
ad:98:94:af:bd:16:80:46:e0:3c:e9:0f:af:05:bb:
90:72:a6:81:2d:36:64:d2:db:93:f5:83:78:31:7e:
44:79:72:04:02:5c:d9:75:b0:93:80:e1:71:e7:16:
81:c7:37:da:86:a2:80:7a:1b:8b:28:8b:6b:23:25:
1e:3e:95:9d:35:6f:8d:18:c3:46:95:95:ca:9c:2b:
b2:5e:10:e5:11:2f:8f:49:51:31:ee:57:26:07:99:
f8:14:46:94:bc:f9:88:c6:f4:e6:75:5a:84:5c:16:
25:82:f4:80:c3:d2:3f:e0:c7:98:82:58:25:d9:bb:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:3E:E0:BA:E5:2B:5B:8B:92:E9:D7:29:2B:E3:3B:95:43:55:FD
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ae:92:a1:6a:ea:35:62:9f:35:b4:06:ab:9c:f4:9e:17:c6:
92:09:3e:a4:b0:f3:42:e0:bd:14:3d:8d:05:34:d2:11:68:72:
93:4f:61:b3:f7:6c:af:4a:31:96:11:10:c1:4a:10:99:a1:7c:
28:87:88:f5:ff:43:67:3e:c0:19:87:5d:6c:dc:06:bd:34:70:
16:8b:d0:d2:3c:49:8b:63:76:84:66:23:14:5c:40:eb:3e:af:
49:48:d8:61:bb:be:59:8b:ec:de:ed:65:d0:41:85:9e:bd:ff:
2e:c4:fe:46:02:0a:a8:b8:aa:d6:3b:03:62:ee:c9:f2:21:36:
73:6b:ed:d6:72:09:9f:06:21:1a:a7:a1:ea:49:74:75:8f:c1:
84:5f:21:7e:90:a0:cc:ff:c6:92:b4:b1:53:4d:9d:8c:74:13:
f7:ba:53:91:7d:58:18:8f:37:93:18:07:ed:99:ec:e8:a5:f3:
73:58:29:ed:a0:eb:41:39:fb:5a:22:35:89:f0:4b:06:4d:dc:
8f:5f:a7:f6:f2:6c:4b:61:f9:b8:d7:04:79:f3:f8:8c:e5:c3:
7a:92:51:50:c2:cd:ae:ec:b5:ac:b7:2c:7a:60:29:d0:06:a5:
cd:09:fb:9c:3d:c2:bb:1f:08:96:10:07:6b:7c:7c:b7:73:87:
a0:ab:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:54 2026 by rpki-client