Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json)
Hash identifier: 6WYVJQGdTz0btUVMS87V7h+qvA7oSt1GZ/6FRzk371w=
Subject key identifier: 3B:F8:D8:81:DC:0B:37:8A:72:8B:F6:24:89:6D:96:11:BD:5A:3C:FF
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019D265F40855EC6DAE87CBF71C3C66232CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
Manifest number: 1335
Signing time: Wed 25 Mar 2026 19:01:09 +0000
Manifest this update: Wed 25 Mar 2026 19:01:09 +0000
Manifest next update: Thu 26 Mar 2026 19:01:09 +0000
Files and hashes: 1: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: KLhm7gPhzs+TI269pn2UUIknNyxtoLuBPPxzaaW7MrI=)
2: o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa (hash: WLtxFHhgeLjy2SQKVLToiGcZPrDlIVzRMO9KiBUqjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:40:85:5e:c6:da:e8:7c:bf:71:c3:c6:62:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Mar 25 19:01:09 2026 GMT
Not After : Mar 26 19:01:09 2026 GMT
Subject: CN=3bf8d881dc0b378a728bf624896d9611bd5a3cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:44:97:ff:3d:35:0b:32:14:1a:6e:bf:a5:
89:1a:0b:9b:8f:f8:39:7b:62:2b:33:da:a6:07:b5:
1a:5a:fb:7f:48:f5:40:66:3e:8a:20:5c:1a:ec:f1:
3b:84:28:53:62:63:8e:1b:8b:16:b1:04:30:d8:f1:
1d:8d:0e:fe:f7:2b:a2:7c:af:b2:ef:7b:5a:fb:26:
0a:d2:a9:17:12:c0:87:ab:91:21:67:da:e1:37:2c:
d9:56:c3:65:74:d5:cb:f8:e7:e6:60:2d:eb:74:6b:
6f:82:a2:09:80:f7:39:43:54:bc:15:b1:fe:c3:69:
48:35:c3:42:d4:19:00:4b:90:37:58:25:aa:4c:e4:
16:60:7e:f9:66:1b:51:4c:ae:3f:b2:de:9d:aa:e2:
22:69:a9:8e:e0:45:29:01:c7:eb:49:d3:82:4e:dc:
c8:c1:de:ba:6d:3e:1c:02:3c:a5:db:0e:c3:16:3f:
bf:d9:4a:11:eb:d9:86:bd:b4:31:67:f4:5a:1e:9b:
bb:da:15:21:d6:98:84:a4:c2:86:ff:f9:d0:1f:d6:
55:de:06:f3:8f:55:b7:03:8f:50:a6:ca:ac:fd:5a:
41:0a:fb:6d:e3:74:e7:f9:d5:24:06:95:88:9e:f5:
db:8c:41:51:65:ec:55:39:24:02:e3:4c:04:f2:c2:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:D8:81:DC:0B:37:8A:72:8B:F6:24:89:6D:96:11:BD:5A:3C:FF
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:20:e6:af:61:98:19:7e:8f:56:a0:09:ad:61:eb:fb:5a:
c0:2e:91:f5:1f:fa:90:da:96:0c:f0:8b:6e:14:95:98:7a:bb:
84:43:48:f3:bb:d6:bc:fb:ab:18:aa:a4:5c:ba:ba:eb:03:16:
99:4c:df:78:b4:00:fb:8c:1b:fd:e5:56:3e:bd:04:7a:88:57:
44:6e:ea:15:63:b6:7c:a1:e9:44:0f:1d:4b:38:3c:3d:34:7e:
91:fd:dd:15:bc:46:ef:b2:fd:43:3e:e0:83:19:63:3d:10:e9:
51:79:3b:4f:e8:8d:f6:33:35:88:e0:94:63:16:55:aa:02:f2:
00:ea:01:40:8d:2a:49:34:9d:a4:d3:06:76:45:7e:4e:b0:9c:
a7:00:7a:93:07:c4:49:1c:7b:e1:3e:a1:09:7d:fe:00:02:75:
26:d0:41:06:80:d0:2b:57:35:2b:b9:21:22:fc:67:c5:d7:4a:
3d:8a:10:b5:f3:c2:1e:81:40:6a:4d:d3:81:df:53:cf:33:89:
6d:a6:83:50:b8:04:c2:25:09:0b:66:e9:9e:fa:39:e9:df:0e:
8a:c5:44:94:2a:67:48:19:2b:7f:a2:a6:40:f2:0a:41:9c:9c:
62:23:e3:60:99:70:cc:c8:22:3b:8e:71:40:cd:2f:ad:9f:76:
6d:6e:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:38 2026 by rpki-client