Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: bZOhthzfDRWzsao9qN4C6dx63GmYoAdQlyS5M4rZPQE=
Subject key identifier: F9:31:D0:A0:D5:BD:8A:77:49:EB:CE:2F:00:06:02:B5:F8:4F:F0:85
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019D3375690BB4DDBEFABDCF82DFE07DFC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 07A5
Signing time: Sat 28 Mar 2026 08:00:25 +0000
Manifest this update: Sat 28 Mar 2026 08:00:25 +0000
Manifest next update: Sun 29 Mar 2026 08:00:25 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: wRTJhA+JvCE3cDyEC01ZsMMsBG4MT+UP9a//5Phg0uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:69:0b:b4:dd:be:fa:bd:cf:82:df:e0:7d:fc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Mar 28 08:00:25 2026 GMT
Not After : Mar 29 08:00:25 2026 GMT
Subject: CN=f931d0a0d5bd8a7749ebce2f000602b5f84ff085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:9e:d6:9e:b9:0b:ad:d8:30:f6:be:a5:c8:
93:e1:68:c2:7d:ba:61:ea:97:21:3f:2f:4e:7a:de:
ad:15:9a:26:4c:e2:28:be:47:45:7a:86:71:ea:30:
7c:fa:1f:f5:3a:bc:c5:ba:47:d1:f3:b1:e8:06:32:
85:b9:8d:57:9c:a7:90:49:ea:17:f1:0e:75:12:2e:
6f:95:ca:f8:44:d3:96:aa:9b:98:ec:20:ac:dd:20:
df:57:86:95:59:af:fd:c7:ec:85:a1:c7:a3:6c:41:
5b:e3:67:34:bb:23:80:38:78:a7:44:c4:ef:8f:ca:
6a:b8:b0:98:60:83:cc:6c:aa:45:7c:2e:38:4e:86:
c7:e2:91:b7:9e:e8:89:70:57:7f:ef:7d:b8:b2:87:
1e:66:8d:68:4e:03:41:1a:bb:b1:e7:f6:65:48:8f:
71:2a:2b:1e:85:ea:8d:b4:00:30:c5:ee:d5:b3:a5:
81:a4:4a:2e:ae:b1:5e:b8:5e:fd:36:65:e4:ec:21:
8d:24:61:2f:14:31:51:70:f0:d6:2e:4a:57:64:a6:
cc:2c:d8:ce:ef:7f:c1:d1:da:96:05:37:36:58:63:
4c:24:51:97:af:52:3e:5b:52:43:d2:a8:28:61:2b:
d8:f3:6a:22:f1:14:73:f7:22:1c:96:18:02:0f:d8:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:D0:A0:D5:BD:8A:77:49:EB:CE:2F:00:06:02:B5:F8:4F:F0:85
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:e7:ad:0d:ea:df:e7:ae:f8:0a:16:8a:ec:33:9e:8b:87:
3c:30:d9:e1:d5:4a:54:a0:b5:8e:58:80:10:5e:93:e7:73:ee:
20:0f:74:3a:b5:fd:b9:d8:a0:ed:14:da:45:d2:35:66:89:51:
b0:8b:e7:43:00:b9:ac:28:c5:68:18:b4:8c:cc:48:3c:1c:49:
e5:6f:45:0d:0b:80:72:be:0a:3d:67:16:ce:a6:5d:02:96:1d:
c1:7f:18:84:d3:fc:e7:7e:6f:65:a1:db:54:f8:43:76:54:18:
06:7c:84:4b:f2:06:55:25:dd:a7:b5:71:6a:c6:ba:ea:39:43:
3c:20:3f:b2:a3:21:d8:5f:37:6a:77:85:d9:bc:cb:1a:0e:80:
99:ab:fe:41:de:cd:a3:82:0a:c0:a9:e7:fc:53:46:e8:21:85:
5b:2c:b5:91:78:b8:36:45:63:1e:4a:34:17:ad:b3:08:47:b2:
61:f2:20:7e:8d:08:3c:81:34:e7:b0:aa:fe:b9:09:a2:25:00:
b5:26:43:9e:20:24:71:4a:af:ec:e1:db:9c:47:fc:fc:86:59:
9f:9d:a1:55:d7:64:8b:fb:15:a0:c3:d7:57:ee:0d:d0:47:33:
0c:e9:d7:4c:13:04:7e:8b:be:1e:73:36:a3:c4:18:5e:c7:a5:
b2:d7:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:04 2026 by rpki-client