Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: bgMrYFvhdnuWSD7A01NiRxSaHPr3hurpnrpax56r1wg=
Subject key identifier: F2:AE:9D:4E:A7:38:50:FF:1C:63:4A:03:35:C4:7B:90:07:8C:81:DD
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019D2A3C6C68377C0C5A63DEE5AEE5D02400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 119E
Signing time: Thu 26 Mar 2026 13:01:36 +0000
Manifest this update: Thu 26 Mar 2026 13:01:36 +0000
Manifest next update: Fri 27 Mar 2026 13:01:36 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: 35AnzJl4rnwFY28Ar/FZUWXMt/cUh3FjKrOoYdjz86U=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:6c:68:37:7c:0c:5a:63:de:e5:ae:e5:d0:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Mar 26 13:01:36 2026 GMT
Not After : Mar 27 13:01:36 2026 GMT
Subject: CN=f2ae9d4ea73850ff1c634a0335c47b90078c81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:8e:43:b8:0e:7a:2b:11:c8:7f:84:68:fc:
aa:73:78:10:94:9e:73:0b:8a:52:48:d1:82:89:e8:
3d:c9:94:2d:30:14:99:ac:5c:34:87:40:48:80:78:
3e:cd:21:76:51:3a:4c:ab:54:b7:24:60:61:a5:79:
8a:f4:19:76:b3:ea:33:c5:73:ca:77:79:a1:f3:68:
21:01:82:85:15:00:24:ea:ee:a4:8d:b6:17:1b:5a:
d5:55:0e:05:09:18:4d:34:7f:ff:55:c0:05:63:c5:
5e:39:59:9f:86:df:20:dc:e0:4f:e7:b3:97:bb:29:
3d:ad:f0:bc:81:32:f5:d7:75:8c:62:a9:bc:b2:30:
a5:ad:82:52:0c:82:33:99:0a:92:3f:b8:0e:7c:08:
55:a1:fc:fc:fc:8e:6b:5b:b7:fa:5c:89:c7:6e:b8:
f4:10:f9:09:f6:3b:d0:00:90:80:06:80:89:5e:e1:
55:af:fa:35:dc:25:e5:5a:06:3f:8f:5f:f3:fa:ef:
8c:28:f3:2f:af:c0:31:c4:32:fb:5e:64:11:d5:5c:
1d:d9:98:cc:09:c5:29:50:77:ac:85:8f:1b:8e:12:
9b:50:62:2f:57:70:d9:08:00:e7:2f:84:53:92:42:
bb:e3:41:e1:45:3c:3d:dd:81:81:07:df:45:72:03:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:9D:4E:A7:38:50:FF:1C:63:4A:03:35:C4:7B:90:07:8C:81:DD
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:cc:8c:07:63:cf:13:cb:a1:82:53:28:0b:2b:87:36:cf:
a6:4f:30:c5:e5:7b:8c:1f:c8:ba:27:f5:36:bf:85:b8:41:17:
d4:c5:66:54:09:73:56:0b:36:fc:d0:e2:07:1a:c7:64:9f:05:
f7:a4:be:31:f2:8b:38:0a:99:ed:27:f1:24:7a:36:f6:d8:6f:
ad:4d:59:ee:64:e9:9b:61:55:e4:7f:2d:e3:4f:66:fd:25:15:
87:dd:02:75:1c:fa:2d:8a:b7:c7:15:6d:dd:7c:e2:4e:e6:36:
3e:e0:19:c7:1e:57:87:80:9e:a0:44:12:40:58:45:14:fd:f0:
5d:c0:6c:61:a1:ff:c7:8f:ba:10:ba:b7:60:e8:c9:93:ef:38:
84:c1:8e:af:df:9c:8c:14:59:0b:9f:cd:e1:9e:c1:c8:6f:b4:
33:4c:65:c2:07:14:a2:36:d1:c3:7f:70:a9:c3:1f:fb:da:6c:
87:0b:75:4d:4e:67:37:47:cf:73:d6:a9:48:0f:81:1c:69:32:
58:50:ba:b2:35:f8:c9:1a:dc:e4:b8:34:89:e8:4d:3b:21:3d:
3c:01:8c:3f:84:d8:fb:7b:5e:3d:e9:10:4f:65:24:8b:6b:3e:
d1:4e:ba:c0:39:8d:c6:bc:30:12:25:63:25:df:44:a2:eb:88:
95:96:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:58 2026 by rpki-client