Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: 9DG9rKoZUxGidsMNeqEf0HIH6YsXq6isrwaVXeMx0zE=
Subject key identifier: 14:AF:28:C9:17:C8:51:51:05:F3:22:99:2F:DC:EA:09:35:56:0B:20
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019D25F1B1F9561E1630EAE922C1C392F607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: +rM3H0J+QvG7zW/WqbCtP+940OT5CRMvea/9IWwohhQ=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b1:f9:56:1e:16:30:ea:e9:22:c1:c3:92:f6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=14af28c917c8515105f322992fdcea0935560b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:58:c3:bf:5a:e4:51:12:7d:a5:c7:69:c8:
d4:48:5c:6d:f4:42:59:a1:a9:ec:93:48:8d:25:3c:
d4:d5:fa:b4:88:15:bc:5e:cf:ab:0f:2a:af:7e:2f:
25:71:ce:fc:14:df:70:2b:82:80:f2:8a:f0:be:66:
04:0b:48:b5:9e:db:38:19:8d:85:d8:1d:4d:de:60:
c9:cf:60:7e:72:2d:8d:8c:3e:67:32:77:9e:3f:d3:
a0:c6:66:5a:bf:79:81:b6:c6:40:c0:dc:57:75:62:
e6:0d:2a:9d:35:ba:f2:c3:7e:8a:8d:1f:11:ae:15:
d8:d6:d6:a5:37:9b:20:5f:e3:ae:f6:8b:91:bc:77:
20:e5:6f:6a:d1:81:e7:44:a5:2f:f4:f4:0e:0f:1b:
5f:db:8e:50:76:2d:c8:d1:db:fd:a4:dd:80:53:4b:
81:05:52:66:60:9b:76:fc:c5:22:67:f4:73:fa:2f:
ba:7b:b6:ec:08:81:3a:17:1a:29:7a:31:c3:fb:bd:
db:00:b2:a0:c8:70:bf:ed:88:87:03:8e:88:88:77:
b0:85:67:31:3d:fc:ff:ce:74:82:54:f1:f1:24:8f:
dc:58:84:da:ea:32:81:62:90:6b:77:d5:73:84:2f:
b7:48:a2:10:3d:40:39:cd:ee:14:12:d5:1d:0f:e7:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:28:C9:17:C8:51:51:05:F3:22:99:2F:DC:EA:09:35:56:0B:20
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:a9:29:c2:21:ab:2b:2a:de:11:c4:55:7c:c9:df:ad:cd:
77:e3:00:6b:c6:35:37:f6:67:0d:5f:26:d9:a4:16:ce:e2:f5:
4c:3c:29:50:b6:7f:cc:81:12:a2:21:d7:e9:e1:28:bb:a5:83:
ea:8f:c3:24:00:08:c2:08:c7:aa:e9:3b:8c:e2:4c:6a:a5:88:
bf:f9:f8:76:d6:90:98:bf:cc:d7:70:68:e5:10:a8:9b:fe:2d:
97:d1:ae:21:3f:61:0f:fa:15:8a:2b:fa:01:89:ab:48:6b:33:
e9:34:84:95:96:9c:aa:f2:e9:b0:68:51:9f:dc:a5:f1:29:5a:
65:3d:48:af:e2:c9:25:27:ad:f8:d4:92:27:2e:ab:d8:64:ec:
dd:ae:0e:01:9d:79:e5:c8:a8:02:ef:82:72:7c:26:c3:ba:42:
84:49:5d:70:fd:d9:c9:ff:42:84:a5:b6:50:9c:06:b5:75:10:
c4:5e:0b:cc:9b:4b:a9:65:79:c9:a2:79:dc:2f:23:ff:ed:78:
10:31:09:47:80:0d:50:8a:a2:db:59:2f:14:d6:a7:b9:be:76:
44:3d:d8:ae:0a:2e:73:aa:3b:e3:a9:12:94:72:22:46:d4:01:
3a:a1:78:28:3b:c5:6f:7a:f2:70:49:45:ee:2f:d5:d7:fe:92:
9e:11:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:04 2026 by rpki-client