Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: 8tQLVZESxTC9ewVhaH873JEGcOWc4wyZrBzYCVYF0EQ=
Subject key identifier: E4:49:63:64:CB:49:AD:77:FE:7F:3C:F3:59:5D:C4:1F:1E:97:F5:49
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019D27DFE55A1CAE645A731804E33EDC0E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1399
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: tlefg/8pXuWC3hCrxNygsyM/Z+EzVPW2PIKpdmVHV2Y=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e5:5a:1c:ae:64:5a:73:18:04:e3:3e:dc:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=e4496364cb49ad77fe7f3cf3595dc41f1e97f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:8b:0d:ae:11:1c:4f:df:ea:9e:92:cc:0a:
af:e4:32:a8:ed:d4:1a:99:e0:db:25:07:1a:b6:02:
cc:aa:51:ae:78:cf:31:9f:59:8a:f2:0f:04:95:36:
0d:1a:57:27:eb:84:e2:08:f6:c5:ca:16:03:10:08:
83:20:9e:60:01:75:a1:b3:62:6f:d7:ee:94:48:9a:
17:18:8d:a0:c3:a4:59:a1:09:e8:aa:36:73:76:ec:
4e:d0:22:1d:15:aa:65:76:c9:24:cf:28:92:83:af:
b3:a0:c8:14:9c:07:88:12:72:0d:13:52:f9:cb:84:
c6:f3:eb:fe:83:fd:28:11:e6:1a:ba:22:a5:77:24:
1c:dc:c4:61:e5:01:e8:da:1c:36:48:34:4f:a9:d1:
14:9e:40:47:03:e1:39:ba:82:1c:9e:f0:b4:08:33:
59:62:fc:4b:7b:67:05:e0:c3:b8:33:0e:fe:d0:23:
3f:5c:b0:b5:2b:91:fa:c7:18:13:7b:ee:5b:20:8a:
db:df:dd:58:4e:3c:77:43:a3:2c:85:c1:8e:33:79:
50:f2:55:3b:7d:9e:62:86:98:ed:fe:5a:dc:db:f9:
c5:da:27:8c:2f:89:59:28:44:9b:61:a5:01:f1:c3:
9c:41:d7:b1:f5:11:27:7f:04:fa:5c:67:d8:4a:46:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:49:63:64:CB:49:AD:77:FE:7F:3C:F3:59:5D:C4:1F:1E:97:F5:49
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d5:77:ba:7e:01:17:5f:c6:56:9e:6d:72:91:42:f0:bf:fc:
b3:ad:83:57:37:52:a9:b1:0f:f2:c2:81:75:6a:b0:b0:c2:2d:
f4:4c:f5:d7:0b:7e:09:f7:06:bb:68:e5:50:7a:30:f1:cc:86:
b5:e2:26:86:21:06:b9:58:3b:0e:9d:07:49:77:ce:1c:79:c6:
47:4f:5e:08:1a:e2:15:74:f9:9a:72:17:db:56:ae:13:06:04:
d9:03:68:58:2f:72:04:a6:2b:9c:02:1a:27:cb:f5:c7:e0:74:
4f:fb:c3:9a:4c:9f:a7:7a:9b:55:75:9e:ad:4f:a6:d4:a0:d4:
e7:48:12:f8:41:f1:40:fe:a2:f5:b4:a3:d0:b3:a1:1f:2a:59:
ec:81:0b:34:dd:51:de:83:33:64:bd:1b:04:11:73:80:21:85:
e4:49:29:16:a7:64:5f:0a:3a:f4:0c:dc:53:44:61:86:5e:23:
1e:d3:55:79:52:1a:78:b2:d5:b3:5d:04:a2:0b:47:7a:bf:02:
2f:1d:26:39:d8:77:c8:24:5f:30:9d:9b:fc:da:ab:91:a0:f4:
63:9e:33:3e:64:e5:48:a1:2d:05:7c:c2:05:57:d8:57:82:31:
82:e5:fd:cb:ea:ef:21:4d:5d:d9:d5:31:24:64:41:28:4a:ce:
a7:9f:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:58 2026 by rpki-client