Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: tuuBeu4G9LwJ7jDaKCzF4v4yZfD04zuFGepsXeWdP1M=
Subject key identifier: 0D:2B:90:FF:C4:A3:A3:51:D0:5E:BC:31:70:21:EE:41:90:21:00:34
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 019D2772C8C22C4AA5F8ACE86574E2C898CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 03F7
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: mNXSjrB1T3o236PRwFq5OQr4p7UBEUNi707VJAXkGpg=)
2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c8:c2:2c:4a:a5:f8:ac:e8:65:74:e2:c8:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=0d2b90ffc4a3a351d05ebc317021ee4190210034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:5f:c2:82:34:b8:d0:4e:5b:7a:47:8f:94:
19:85:0c:97:22:01:5d:f5:04:fd:bc:91:cc:a8:43:
05:65:37:95:10:7d:d5:d7:91:73:41:3f:bc:a5:e3:
cf:5f:29:e0:7c:d4:c1:26:46:08:4e:ed:36:1a:50:
52:63:e7:eb:1b:d3:d7:bc:fe:2d:bf:ae:9b:a3:b5:
ba:0b:e0:54:e4:d2:07:77:b7:83:5f:a3:bd:73:ee:
3e:af:56:aa:78:eb:e1:08:30:ea:4a:ab:7f:99:c1:
5c:52:b0:92:3d:f1:83:44:32:57:0b:97:d1:d2:1a:
db:44:e8:44:32:3e:cb:1e:4a:c2:57:4c:a7:5a:e8:
36:19:91:09:84:1f:38:f0:1f:9a:e2:74:e0:a7:35:
25:fa:61:43:ab:39:5f:67:0d:9a:00:d2:f4:cb:dd:
0f:ba:f2:bf:cd:20:de:03:3b:c8:02:17:24:89:20:
0c:9e:db:e4:c7:1a:95:1d:50:ce:f8:11:44:58:4c:
31:52:66:fb:fa:af:14:d7:58:3d:42:94:5d:60:b4:
a3:55:ed:80:39:20:25:29:16:d9:eb:4a:df:36:52:
f6:c0:ab:35:cd:d7:1c:b7:24:18:aa:c7:8f:7c:33:
11:96:ad:64:bc:f8:4b:35:8e:db:8b:4e:2a:76:28:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:90:FF:C4:A3:A3:51:D0:5E:BC:31:70:21:EE:41:90:21:00:34
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:47:3b:72:3a:7c:50:55:d0:2e:cc:84:7d:e9:2f:9e:b1:d9:
02:70:98:2b:51:25:d0:e5:bc:2f:db:cb:fd:44:58:11:69:c3:
cd:fd:60:9b:f4:a3:2a:46:58:92:06:b3:51:9a:8b:ac:96:43:
76:8b:87:a5:ef:33:17:94:70:4e:2e:03:29:3c:a8:10:4f:4b:
bc:aa:98:91:48:11:fb:fb:e7:92:2f:90:55:4f:1b:e2:de:63:
fa:43:70:02:0b:44:91:44:57:af:01:bf:e8:71:f1:33:78:e2:
a8:00:f7:aa:c0:cf:82:ce:d6:74:d1:af:4b:5d:17:4a:89:63:
d2:a8:8b:97:a0:03:6e:df:0c:a8:7f:33:61:ad:24:06:be:e9:
5d:9f:78:c0:19:52:2b:cc:34:71:de:1d:b6:75:24:2a:23:6d:
47:b9:95:90:e8:e5:62:b6:56:aa:1a:0b:aa:b3:73:b2:ab:0a:
ce:8f:fa:57:7f:df:db:0f:4b:ba:2d:08:c6:f0:c0:13:d2:39:
d1:9c:48:25:44:12:28:29:9e:9a:72:c1:99:21:59:05:e0:6b:
9b:58:c9:2f:57:43:d7:12:1f:34:50:c5:0f:e8:99:ce:be:fa:
c5:c7:fc:ad:48:3a:3c:e7:b9:99:e9:ae:f7:70:73:0b:a5:85:
3e:a0:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:02 2026 by rpki-client