Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: 2RKu0uIbZvHHmZCHjJL/dV/R2QvlmKv5NuabQeB8/Xo=
Subject key identifier: 41:B9:B5:8F:85:0D:D0:89:18:6F:8A:B0:26:B1:65:B1:EC:2C:F2:A3
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019D2771CAAA9427A8277C324C8DA83CABBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 143A
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: uMwEakYPeyOJuZqtM+w5Dd2/qLxOAhER+ONMUxLYRmM=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ca:aa:94:27:a8:27:7c:32:4c:8d:a8:3c:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=41b9b58f850dd089186f8ab026b165b1ec2cf2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:f8:13:eb:b8:09:62:75:f0:ee:f3:f8:e1:
90:cb:ad:9a:b4:61:5e:1f:90:44:8d:03:e0:93:f0:
dc:82:61:2f:17:9f:19:a9:75:95:87:a6:f8:e6:05:
14:18:4e:1e:6d:14:6f:aa:ac:b3:27:52:71:e8:92:
2d:d3:3f:16:e1:31:1e:86:50:81:f7:16:08:c1:32:
62:c3:da:d1:9a:45:df:3f:8e:fb:44:a5:ca:24:88:
58:b6:30:42:2c:46:f8:db:e0:da:1d:80:f2:aa:b9:
e2:b9:89:55:e3:34:19:1b:ed:ce:66:c2:10:fc:00:
5a:da:17:7e:cf:40:db:5c:8b:45:be:67:fd:3e:a7:
d6:f1:4b:c1:3a:a4:a9:e4:1d:fb:05:e1:13:e8:6d:
8b:a7:f9:31:c9:ec:40:87:80:1b:4a:78:35:c2:8d:
76:c6:38:64:c3:f5:63:58:ad:1b:8c:0e:d9:0b:6b:
c3:d0:d6:19:86:b5:4d:20:ab:9b:90:cc:7f:d6:2e:
e3:fa:0e:e8:d3:f9:48:ce:af:84:30:33:29:e4:6b:
64:06:7c:26:92:d4:ec:94:0e:bc:bb:fe:f8:3f:e7:
39:f5:56:d4:5e:79:74:14:3f:19:1c:7e:db:56:b2:
81:ec:dd:05:a0:e0:3c:fc:bf:5a:a1:07:83:ef:a4:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:B5:8F:85:0D:D0:89:18:6F:8A:B0:26:B1:65:B1:EC:2C:F2:A3
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:cb:d6:4d:30:33:7e:e3:6c:de:53:e1:9a:c0:b1:4e:05:
e2:c8:86:06:92:6e:17:cd:e0:87:71:0b:b1:5d:ee:3b:44:81:
0f:ec:eb:69:a5:5c:12:66:a7:b2:9b:77:b4:75:d8:6c:9c:fe:
03:cd:88:79:08:0c:c7:71:b8:3d:f3:37:7b:8f:3e:0d:a7:14:
29:c7:10:73:73:93:35:68:7d:83:63:13:48:fc:12:43:79:2e:
f6:51:69:f5:a6:08:52:57:53:cc:84:89:d9:3a:8c:e4:60:3e:
02:2f:0a:5f:6c:1d:c6:9a:c9:d2:a5:7b:f1:8f:ad:9e:ab:97:
9e:27:fd:37:77:fc:3b:72:dd:38:a4:95:1d:10:f9:59:7c:6b:
23:8b:2e:7a:e6:43:92:70:6c:dd:cc:07:6b:88:f0:87:a8:d9:
12:4b:f7:ba:52:ec:53:46:2e:50:9e:7c:34:9b:e8:c6:88:a5:
df:74:9e:5a:c8:9d:6c:5b:79:7e:3a:2e:9d:59:36:53:cf:52:
ff:e9:ae:02:74:dc:7a:fc:fa:96:7a:35:87:e0:da:9d:31:85:
23:20:76:4f:c2:e2:8f:f4:08:28:53:13:24:61:5c:04:19:b1:
13:e8:b7:42:85:bf:f5:ef:4e:93:33:6f:5f:31:bf:17:9d:27:
25:7e:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:49 2026 by rpki-client