Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: EuLReUrShvlnnxKKpv9qkL/FUNaCqnFRQPXnz4WjIOY=
Subject key identifier: 19:8D:F7:CE:E9:11:7D:47:98:54:24:8F:7F:AE:B5:FB:AE:9B:5A:90
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019D26283EE647D200A721A5208CE89B636E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1339
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: 7eyV1dwcL/kgMsyMiJHTYs914NbepWXVi1peQGLRF3s=)
3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3e:e6:47:d2:00:a7:21:a5:20:8c:e8:9b:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=198df7cee9117d479854248f7faeb5fbae9b5a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:0a:05:a1:74:51:ce:27:6d:5e:f4:23:78:
d8:09:88:6c:2b:00:97:95:57:38:55:c3:41:e2:0c:
59:2d:87:1e:8b:68:dd:84:a9:71:3f:f4:6e:39:53:
c4:75:b9:9b:33:93:dc:15:6f:f1:8e:9a:29:55:cf:
aa:c0:a4:83:b3:9b:c3:17:dc:31:c0:9e:0a:ed:5e:
fa:4d:19:da:85:f7:69:ac:6c:3b:91:1a:ac:1b:5f:
d1:dc:c0:07:fe:3e:05:1f:1f:0b:99:c3:da:fe:4a:
32:c5:86:0f:ea:17:2c:7c:43:e5:83:be:6d:d1:35:
83:ef:72:bf:04:84:62:12:fa:c0:5b:00:c5:9e:73:
78:a7:4d:d9:48:24:b5:c4:80:9f:13:09:2d:c9:d9:
05:1d:3b:bb:81:30:18:47:ed:5b:34:f2:1f:10:8c:
80:11:1f:50:e0:26:60:71:64:6a:77:31:fb:e4:d4:
24:62:7a:91:09:a5:04:0e:6e:fb:02:70:e1:fe:7e:
ee:3d:31:e9:08:28:0e:23:6e:1b:b6:aa:78:c1:57:
50:86:7c:af:b7:50:4c:76:9d:6f:5d:ad:fb:c1:d0:
34:1c:9e:7c:19:1c:2a:12:9d:3a:36:ce:5c:d7:01:
b8:57:6f:a7:c1:50:10:02:f5:f3:5c:85:ec:24:74:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8D:F7:CE:E9:11:7D:47:98:54:24:8F:7F:AE:B5:FB:AE:9B:5A:90
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:89:53:57:d4:5d:61:de:65:d8:2b:56:4a:59:f6:84:fe:5c:
81:c4:92:51:9d:13:06:89:e1:85:cc:93:98:b7:05:b5:5a:a2:
b1:f0:17:21:94:49:10:b2:d2:fa:25:92:8d:40:9d:5e:38:e2:
90:ac:7d:fa:e8:65:18:a3:e6:ca:3f:34:b8:c9:94:92:a5:03:
50:f5:d0:28:ca:9e:ac:68:fc:71:19:d9:93:fe:46:1b:5e:d4:
a0:83:91:35:d9:4c:1a:67:fa:7c:60:61:ca:9f:e9:18:1f:5c:
52:58:5d:28:fb:88:18:6b:a8:63:9c:8e:af:bf:dc:d0:58:a0:
14:37:2a:67:ae:eb:70:b5:f0:7d:52:49:2d:8d:ed:2a:07:45:
66:e1:20:02:70:4b:e8:66:fc:7a:c5:e0:a2:b9:37:b0:ec:70:
e1:96:da:a4:82:b0:a4:26:41:21:0a:77:e2:15:da:e0:12:0e:
5c:8a:dd:47:87:2e:a1:af:80:7a:78:a6:bb:d4:38:34:69:c9:
ef:e5:59:05:2d:cc:72:ca:88:9f:a6:56:40:2b:7a:8e:fe:e2:
bf:b1:86:de:15:3c:98:f0:1e:a3:74:4e:19:50:60:7a:c3:7e:
42:38:25:74:1e:c1:b5:57:34:9a:e4:6a:98:95:15:df:09:89:
6c:b7:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:07 2026 by rpki-client