Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: fI+/jMDWaPczLoAo2/beuXPzMSf1IRRCVjOQ4hq9V4Q=
Subject key identifier: 9C:8D:91:6D:12:D4:19:49:A8:98:5E:E1:2C:65:9A:63:19:B7:1E:6D
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 019D265EF596B72B45DDD588B6157D1CF0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 052E
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: URg9KW2o1ZImbTL5H1PIkPPDVR3eHx2SToPH9Eyy1v4=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f5:96:b7:2b:45:dd:d5:88:b6:15:7d:1c:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=9c8d916d12d41949a8985ee12c659a6319b71e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:52:87:bb:64:47:fa:5c:b1:a8:cf:7c:d5:
a5:7f:1f:7b:2f:b9:e5:ba:51:8d:e4:a3:3a:1d:29:
30:2a:f1:9d:ab:f6:5f:5e:69:a5:98:bb:9a:53:fd:
66:cb:05:4e:5f:f4:e3:a4:bb:5f:ae:8d:a4:28:78:
dd:29:15:a2:b6:3a:01:8e:09:24:9b:ea:17:3d:89:
26:43:0b:c1:a5:51:33:de:c2:f4:2d:c4:c6:1d:81:
73:b2:05:7e:70:b4:d9:c9:d5:58:37:a4:95:a2:e9:
4a:2b:bb:e2:e6:a1:a0:a8:41:47:8e:10:f9:75:f6:
48:87:f8:96:b6:a0:22:ac:8c:df:d3:3a:b5:7e:84:
47:76:f0:8c:ea:2c:d1:ba:4c:d9:ec:9f:96:bc:85:
98:0e:48:49:41:9a:df:96:37:1c:99:e2:b9:d1:31:
0f:c6:90:99:0d:2c:1e:16:cb:21:eb:89:67:a5:c4:
9b:8c:65:99:9e:c5:52:9e:6b:d2:43:8c:ef:11:e8:
2a:0c:66:2f:c9:fd:21:0c:d7:fe:7d:fe:c6:1d:d6:
93:ea:cc:9c:b4:6f:e5:7f:54:be:84:dd:e2:e2:5f:
f8:1a:a6:fc:cf:e3:fb:0e:1c:6c:83:15:3c:9f:c8:
ff:f8:d4:0e:96:e8:b2:e5:a4:d1:2f:63:6f:dd:f9:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:91:6D:12:D4:19:49:A8:98:5E:E1:2C:65:9A:63:19:B7:1E:6D
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:fd:18:cb:35:78:65:ec:ce:9c:ee:23:cf:30:80:a4:a5:
fd:a8:c3:7f:93:49:a9:b1:87:59:fd:61:76:d0:89:5e:93:5a:
26:58:fa:d9:15:43:b7:96:18:d7:33:5f:cb:66:f5:5a:a9:f3:
ba:05:02:70:78:62:48:e4:8a:14:3b:9b:5e:f0:10:95:f7:7e:
b1:95:2f:f6:8f:32:fb:d6:f4:b6:f5:d7:50:67:cf:f0:61:dc:
f1:ae:3e:8e:e0:eb:03:53:c2:ca:b5:9f:a3:6a:88:6a:bd:dd:
dd:68:54:12:ad:0b:56:c0:64:fe:8f:03:ec:64:af:21:eb:91:
dc:c8:ad:49:e8:58:cb:ff:6c:38:89:31:1e:74:f2:22:82:b1:
45:3f:e7:7d:38:08:12:6a:6a:e7:24:14:7e:f0:bd:b9:bc:9a:
bf:ba:f1:3e:dc:d5:77:be:56:3c:ea:0c:1d:36:bd:8d:dc:d0:
ca:df:fd:5f:e6:dd:15:a7:5c:d9:96:0d:7e:83:59:b2:8b:75:
70:5c:ff:dd:e4:a2:6b:bd:f2:31:09:75:62:90:a4:ee:c5:2f:
06:f6:39:34:b7:d9:d8:80:fb:bc:c4:74:8c:ed:7b:ef:95:07:
5f:ab:b7:4a:e2:65:55:57:92:11:6f:60:1c:84:d8:4f:2d:b4:
d3:79:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:03 2026 by rpki-client