Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: 1aDexGXBAfwH5ljIf6mLuaN2mxkuUPl/tAzzuAzehqA=
Subject key identifier: E2:08:A8:8A:0A:93:A6:5D:47:D1:6C:23:CC:2B:55:77:5C:12:67:8A
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019D27722401728A120D320904598F0421B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1708
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: wJAGlnIRFe3GAhRW7Z6lmlU75/XTp68mVtcQfv2N14M=)
2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:24:01:72:8a:12:0d:32:09:04:59:8f:04:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=e208a88a0a93a65d47d16c23cc2b55775c12678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:50:b1:eb:69:33:15:82:b3:65:3e:ac:2b:
91:16:30:13:5b:2e:11:37:47:2e:ce:cf:c5:0f:d6:
f3:6a:fc:de:3a:71:37:e1:2f:87:78:56:28:12:74:
89:29:07:dc:33:87:ed:15:96:c1:cd:5d:21:af:1b:
24:7d:37:15:8f:40:20:b4:1a:58:ef:5a:ee:b7:a2:
99:19:90:fa:f4:28:8c:29:de:d8:09:a0:36:f4:4a:
3a:ea:ea:13:46:3d:28:88:e3:37:98:c4:29:12:44:
7a:e3:88:b1:61:f9:b6:aa:0a:13:44:3f:e7:20:2c:
94:a6:f1:30:63:8a:6a:53:a0:b7:95:12:dd:af:d5:
5a:77:e3:17:88:59:51:1a:c6:bb:78:71:95:d4:76:
04:f8:1d:2a:e4:11:5f:57:6c:f0:6f:4f:0a:56:6c:
28:e4:a1:75:2c:f8:6c:bf:b5:4f:85:b5:51:b9:6b:
2f:2a:6a:24:7f:33:40:d8:37:5f:3d:56:92:7d:57:
06:d0:93:b9:d9:c1:e2:a9:84:15:32:51:12:75:48:
da:89:c5:55:7a:b1:fa:2c:a7:10:01:48:5d:e8:5b:
5b:05:99:b0:e2:43:e6:d3:4e:c1:90:5d:42:fb:ee:
f3:24:0d:d6:06:65:63:41:35:2d:ec:c3:01:d4:c9:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:A8:8A:0A:93:A6:5D:47:D1:6C:23:CC:2B:55:77:5C:12:67:8A
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:23:c4:f3:31:8d:e4:5f:0f:91:03:71:42:c3:d1:4a:fa:eb:
69:dd:47:66:d6:3d:9f:1c:6e:94:77:4d:ce:cb:a0:de:99:3d:
19:a0:74:aa:c7:70:9a:9f:c2:27:2d:f8:03:d1:fd:9a:be:58:
9c:eb:b8:33:23:89:95:ff:48:02:d0:63:98:78:68:5e:0f:64:
99:a0:6a:d9:7f:ae:09:e1:3b:eb:c7:e9:3c:df:87:11:65:28:
59:53:08:51:fb:df:1a:c7:95:d7:ab:8d:69:e8:cc:7b:37:20:
47:9e:f5:24:4a:8e:4e:9a:3c:a7:76:d5:a7:81:59:60:6c:48:
a2:23:28:a1:a2:7c:06:d3:3c:40:4f:12:61:6e:cc:1e:65:55:
27:87:d6:dd:8f:16:34:8a:07:94:15:f8:23:73:bb:41:fa:3e:
83:20:90:64:5e:70:d8:bb:d7:3c:d5:ea:ba:bf:d3:5b:b6:cc:
55:b9:af:88:24:7c:12:4c:1a:80:9f:48:d8:2a:3e:99:05:b9:
63:3a:63:88:a7:48:96:a6:3a:06:d0:0a:8e:47:6a:2b:e4:b6:
c0:17:00:cf:55:2b:b0:d9:6b:c4:4b:16:a1:74:d4:f7:9f:ad:
7e:be:bb:d9:0c:52:f9:1e:d3:47:55:6e:78:0a:3e:1f:70:30:
9a:7c:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:28:46 2026 by rpki-client