Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: u7ulCbZcjTvd/ZtFhEURJ+uuqfff4JXtlo8pQCZ1VY4=
Subject key identifier: 39:58:6E:E6:A4:6F:99:C7:76:EA:FB:B2:E8:71:CF:5B:96:87:38:E2
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019D26CCC672FB51768B8EF11E939F13F4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 042A
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: XocP6kceO0AZoG4NkMqQ2bgbMxY+JzhBj1Dh5kHtCYs=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: epxl9L9HWnrGUI5XuexvyGVngTU.roa (hash: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c6:72:fb:51:76:8b:8e:f1:1e:93:9f:13:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=39586ee6a46f99c776eafbb2e871cf5b968738e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:2d:14:d4:f6:9e:c4:94:8c:be:e7:8b:ac:
d9:d9:4a:fb:ce:b7:e5:b7:66:f1:c0:f4:39:c5:61:
c2:cb:ad:02:ee:91:05:95:66:c9:8e:60:8e:18:a8:
f6:5a:c1:35:63:ec:76:fd:24:b7:5a:b3:98:a2:0a:
fb:9d:5c:35:7e:4b:63:c5:e7:0e:a2:50:fc:51:1f:
c6:b4:e3:53:a1:d4:70:4f:28:53:0e:3c:9c:0a:83:
54:b0:47:ee:20:32:1c:fe:bc:ab:4b:d6:5a:b1:a4:
80:99:f9:93:d1:cb:c0:f5:40:b8:ed:5f:61:62:ae:
c5:a6:e8:32:46:53:81:00:ea:9a:78:af:87:c5:fe:
f3:fc:4e:24:50:b8:fc:c7:1f:f4:a7:5e:03:80:81:
93:b7:d7:77:63:d2:5a:6a:0e:91:42:a1:82:bc:1f:
e0:bf:b3:ba:e2:77:48:dd:05:f5:57:33:39:aa:c9:
0f:4a:c5:3e:4a:a5:d1:cd:ca:f1:1e:dd:78:35:53:
6c:c6:35:bf:e1:0a:2e:d5:b4:56:87:fb:c8:0a:72:
a8:46:2a:0f:c7:cd:ce:0a:a5:f1:16:0d:63:98:9f:
b5:25:08:e5:c8:c1:9f:e5:9c:65:47:f2:5e:b2:b7:
59:0d:49:b7:dc:d2:55:a2:c0:3c:bc:4b:18:ba:a6:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:6E:E6:A4:6F:99:C7:76:EA:FB:B2:E8:71:CF:5B:96:87:38:E2
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:70:5f:9b:05:8e:29:66:58:26:41:dc:6b:43:46:cb:64:da:
0e:e1:e4:1a:e0:ae:ea:f4:29:da:9c:85:e1:2d:f3:4d:7e:27:
02:d6:41:75:71:26:29:e9:dd:92:66:39:28:9d:03:e4:4b:96:
68:fa:d2:86:1d:b5:29:9a:15:65:dd:a2:a7:30:4c:20:9c:43:
d1:22:79:33:2a:d8:e6:e4:0b:5a:6f:9e:b5:99:71:0f:06:3b:
c0:f3:cc:b1:5a:31:cc:b7:a9:41:87:20:98:57:54:71:bd:62:
18:f3:c4:f6:28:25:a8:54:6b:7c:6f:dd:54:2e:c9:4f:5e:f2:
8e:85:00:8f:ea:f3:03:b6:31:a3:08:75:d6:e0:b5:40:66:73:
55:a5:e1:e9:95:21:01:37:76:00:5d:6f:1b:ee:cf:2b:6e:eb:
11:d0:c9:02:1f:24:c6:60:ed:4f:98:0a:23:d6:f4:da:42:17:
7a:ef:01:40:57:7e:38:13:59:00:7a:38:e1:0b:39:25:87:19:
80:11:98:06:e5:91:28:c2:b6:29:ba:34:d9:36:42:c0:92:86:
09:b4:d7:74:03:e2:06:68:e0:3d:e6:ed:98:a3:f0:3b:1a:73:
73:74:1a:3d:2f:af:59:e2:a1:02:ae:b8:0f:76:6b:56:42:5a:
29:c9:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:51 2026 by rpki-client