Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: yNwKE7ARID+hkB6ecG8RIuivy8jHj1VkrQ5v6kkRaMM=
Subject key identifier: 7C:2F:68:3E:F5:27:7B:C7:7F:47:3E:33:A3:F8:CB:E6:AA:20:6C:6C
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019D2704E557B62C320ED22A285F3C6E8D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1480
Signing time: Wed 25 Mar 2026 22:02:05 +0000
Manifest this update: Wed 25 Mar 2026 22:02:05 +0000
Manifest next update: Thu 26 Mar 2026 22:02:05 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: hc6ctOxG1Kp5sbNL9Ccm5U5gAFeU+a0ksLR6hGjT/64=)
2: rK_eXiPCuOjW-auhckDc_o9LpbU.roa (hash: 9zrMuRy0E1ETZnPDy8ZqKg+/z8n/i1oHLCCis26nPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e5:57:b6:2c:32:0e:d2:2a:28:5f:3c:6e:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Mar 25 22:02:05 2026 GMT
Not After : Mar 26 22:02:05 2026 GMT
Subject: CN=7c2f683ef5277bc77f473e33a3f8cbe6aa206c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:fb:2b:38:99:83:2a:1e:b9:ad:90:af:7d:
f8:84:d6:06:5b:9e:17:69:84:29:3f:d9:8e:4f:ed:
67:58:14:62:c3:f8:e8:22:b9:74:b3:d4:f0:46:fd:
1b:e1:a9:c8:10:1a:5d:05:70:d4:50:25:ec:55:fa:
9a:f8:93:19:29:01:81:63:66:f2:0e:c6:21:6a:cf:
5e:34:ba:e5:7e:6c:17:c3:1d:f2:f8:f6:f1:f2:4e:
29:cf:15:97:b9:a5:0d:d6:2d:af:50:f5:d3:ae:25:
25:91:06:57:82:a7:58:91:15:23:ea:19:1f:b0:b5:
97:c1:f6:50:17:cc:4c:dd:d3:d1:e4:02:b6:33:57:
a6:84:e8:39:7d:f0:94:dd:cc:db:79:f2:70:85:65:
b4:95:27:28:e3:42:0a:0a:80:bc:74:53:21:8a:77:
cb:b8:30:ee:4e:2e:28:e5:1d:15:4a:21:ad:7e:24:
43:12:ba:a2:2d:1d:c0:6d:f3:f8:0c:b6:08:43:77:
4a:20:b0:6b:47:57:e0:eb:5b:b5:ce:5f:df:b9:45:
30:90:2c:46:44:50:fa:ac:05:45:41:04:e9:31:9e:
bd:b3:0a:c2:51:9e:7c:0c:0d:06:d6:cf:41:14:a3:
74:f7:7c:ec:35:7e:fa:8d:27:76:d2:ce:cf:e4:55:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:68:3E:F5:27:7B:C7:7F:47:3E:33:A3:F8:CB:E6:AA:20:6C:6C
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:d2:57:79:01:73:53:04:3e:54:94:32:2f:f8:22:8e:4d:
cc:cb:b4:c5:eb:cb:e0:dd:d0:24:40:87:64:07:6d:0b:d0:62:
a4:67:a8:5a:fd:26:1a:51:04:a0:5c:06:0b:55:d0:5f:82:73:
9f:c7:01:7b:06:6e:9a:fe:a6:08:ac:f6:21:c2:f7:7b:38:dc:
57:c7:e2:66:9c:56:50:d4:9d:73:5d:2e:a8:62:46:96:e1:c5:
0c:c9:90:e5:7e:02:b8:cb:cf:58:a1:f1:bd:03:30:eb:57:0c:
27:bd:ae:11:58:88:42:3d:f8:6c:2c:c5:65:20:bf:e6:0d:9a:
94:60:4d:d7:b9:5b:4b:c3:e0:e0:96:ec:9c:84:ea:47:24:ae:
c7:9f:85:d3:7e:c2:a1:ca:f5:59:bd:a6:a3:c9:52:a3:92:56:
fb:10:1d:ad:e5:f5:63:3b:30:10:03:4d:d6:03:c4:be:39:b8:
02:24:c7:77:20:ee:da:9f:02:33:25:7e:03:96:62:9e:11:c1:
c6:37:4b:9e:c8:a5:61:44:c8:41:ff:f8:8d:22:28:9a:f1:f7:
96:8c:6f:14:5c:16:98:06:ca:95:9b:43:e0:a1:3b:f3:f1:6e:
97:84:ee:88:9a:c2:ca:63:57:08:d8:e4:52:4a:47:6d:8e:1a:
15:e4:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:41 2026 by rpki-client