Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: jOYd+cd2ercei2rqX0Wd5Xq9FIT+L0YW+A8K9bp8ajs=
Subject key identifier: 16:A6:13:30:BC:90:38:34:A3:F9:04:AF:C2:B2:0F:CE:46:0C:37:DD
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019D25F1658C6EE1AE824CF41C0AA0BC373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 138D
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 17:01:10 +0000
Manifest next update: Thu 26 Mar 2026 17:01:10 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: eqzbN0AH843FoDqobGaASK9CfKqHhTx9amJQSfK67Yk=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:65:8c:6e:e1:ae:82:4c:f4:1c:0a:a0:bc:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Mar 25 17:01:10 2026 GMT
Not After : Mar 26 17:01:10 2026 GMT
Subject: CN=16a61330bc903834a3f904afc2b20fce460c37dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a7:63:d9:de:65:d1:60:b4:98:bf:d3:cf:bc:
c8:46:db:ef:69:83:71:02:d0:bb:15:65:6d:bc:b9:
8a:38:fa:3d:49:2b:b9:78:18:27:a1:54:c8:a6:51:
5a:ce:95:42:11:60:fc:bc:5b:ed:01:6b:fc:0c:9e:
c6:68:6f:47:91:e4:69:32:c8:c3:1a:db:0e:c6:f4:
53:73:51:4a:eb:ee:5e:62:80:7c:34:39:99:18:ea:
2f:66:9e:8d:4e:25:02:e9:69:d3:3a:53:84:20:ca:
e5:e4:29:16:67:cf:1a:f0:02:6c:79:b8:32:c1:36:
1c:8c:72:0a:50:c3:ac:bf:99:43:5d:68:76:ca:5c:
3a:e2:7b:8c:1b:16:5f:85:c2:77:f3:dd:2d:b4:8d:
ea:7a:95:54:11:41:c7:5d:2a:e0:ea:df:ff:16:0e:
ba:f1:9c:a8:72:4b:80:88:10:99:21:32:4d:30:72:
87:65:ae:43:0d:09:b0:4b:e0:61:9a:76:5e:2b:49:
cb:ad:8b:28:91:84:57:19:94:ff:a9:de:95:90:90:
16:23:25:ec:df:11:39:ab:cc:a8:b8:2f:db:8b:d2:
2b:56:4c:f5:3d:b6:2b:72:57:7b:e0:73:53:da:c5:
41:40:fb:7c:45:61:e8:9c:1e:30:6c:8c:14:78:7f:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:13:30:BC:90:38:34:A3:F9:04:AF:C2:B2:0F:CE:46:0C:37:DD
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:ff:65:3e:c1:a8:80:cf:d2:c3:c2:fa:f1:87:a3:df:15:
0e:8e:17:c4:3c:15:b4:12:3f:22:31:ef:66:4d:5f:e8:f4:76:
c8:05:7c:09:f4:95:b8:05:46:3e:bf:e6:5f:9e:76:d8:81:f6:
b3:b6:ea:65:6e:89:cd:1c:7b:34:7f:ee:6d:df:e5:e9:9f:94:
6b:36:a3:38:13:f8:ea:97:7b:ed:3e:03:b2:84:51:34:c7:f3:
04:b8:5c:8c:41:42:fc:7f:8a:b7:79:4b:23:ab:23:8c:05:de:
df:f4:fb:55:d8:f1:6d:46:91:96:f4:bf:6c:c5:f2:9c:f0:5f:
f8:32:ee:6c:b5:c4:4b:79:7c:c5:f6:99:50:23:ec:b6:84:d8:
20:f4:71:72:83:2f:89:c3:a2:f8:42:a0:44:b2:91:c6:4e:c4:
a9:61:6b:d6:0c:6b:82:b7:23:f8:96:c4:ae:9f:31:d7:b7:f9:
19:53:69:d4:ce:70:26:8b:d9:b3:e8:21:23:55:49:c4:62:f8:
9b:5a:5f:51:9e:bf:62:db:e8:84:57:4b:2e:fd:e0:a5:e2:b1:
d6:80:8d:db:b0:04:99:27:b6:f4:c9:29:4e:2b:fc:f1:db:0b:
e2:47:75:34:2c:6c:93:c1:18:a2:a8:39:a1:ab:d5:1e:40:ac:
35:f7:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:32 2026 by rpki-client