Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: 6VYMqrFFr6Qvuj/niFms8DLxHRlzdVl2huoW+5R48ds=
Subject key identifier: 9E:37:CB:71:CB:E2:B2:45:6C:1E:57:9A:CB:DA:00:D1:69:E2:2F:B0
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019D29CE2F1172358639ABE94A549C0EFBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 14CA
Signing time: Thu 26 Mar 2026 11:01:11 +0000
Manifest this update: Thu 26 Mar 2026 11:01:11 +0000
Manifest next update: Fri 27 Mar 2026 11:01:11 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: 8TfNX8uaXN/5qvo+ybiLXzykkFHkjKXyjKiNPHQYNxM=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2f:11:72:35:86:39:ab:e9:4a:54:9c:0e:fb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Mar 26 11:01:11 2026 GMT
Not After : Mar 27 11:01:11 2026 GMT
Subject: CN=9e37cb71cbe2b2456c1e579acbda00d169e22fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:1e:50:0d:5d:ec:2b:1a:92:e7:b7:08:83:
82:71:7b:63:59:84:9a:e5:5c:6a:cb:aa:89:48:00:
04:40:e8:e5:10:5f:ec:22:25:4a:1a:00:bc:68:c9:
20:32:a7:fe:4a:ad:53:70:58:8a:3a:ee:cc:86:58:
24:62:28:ee:69:e0:9a:4c:ff:bf:dc:4f:92:58:ea:
fd:0a:92:9f:bb:98:37:85:3d:53:ac:42:86:31:89:
8c:cf:a9:cf:d3:89:5d:23:71:61:4a:00:e1:73:1c:
d4:21:1a:7b:1e:28:80:d6:1b:1d:87:c5:90:5f:fa:
51:6e:7c:92:f8:77:e5:4c:d9:b2:98:51:3e:c5:c3:
2f:8a:53:b1:39:dc:fc:e8:8e:69:ba:86:2a:3d:da:
e9:e8:83:d0:f1:8b:16:18:fe:75:c1:d2:8b:41:47:
b9:2e:96:08:ad:7d:2a:47:31:93:cf:1d:ca:0e:1f:
99:e4:64:30:7f:f5:4d:12:00:a5:c1:7f:dd:bd:b1:
9e:f4:3c:ac:10:fc:ac:11:9e:6e:bb:0b:8a:05:f8:
f6:ed:a9:b8:c2:cb:60:16:4b:c0:4a:df:4c:74:53:
c0:a8:fa:26:d4:c8:19:e5:f9:36:05:d2:b1:35:8c:
b6:f0:75:6c:7b:1b:eb:29:4d:6d:11:90:40:25:b6:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:CB:71:CB:E2:B2:45:6C:1E:57:9A:CB:DA:00:D1:69:E2:2F:B0
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:00:aa:11:0a:cd:5b:33:d4:f7:0c:10:bd:6b:00:68:1f:b1:
05:a4:4a:71:4a:98:6f:58:55:c4:d4:e9:bb:58:f4:86:0d:8e:
4a:e5:a7:23:46:86:28:14:3c:04:59:1d:75:8c:73:29:ba:1c:
f3:7f:19:6a:be:b8:c3:7d:87:ab:d5:3f:bb:11:5d:f2:4e:58:
f5:c5:d1:a6:39:3b:10:49:ac:f5:8a:85:36:41:bc:e6:a8:60:
45:79:a6:d4:f9:25:93:32:5f:ac:3c:c3:a4:f9:9d:6c:3d:9d:
be:0f:a4:7d:c0:cc:c1:66:e5:a1:72:4a:53:26:5e:2d:3c:61:
9b:a2:1e:00:80:a2:a1:30:23:5d:96:82:8b:90:b0:59:43:e1:
f0:17:9b:4c:d1:e2:d1:9c:3a:ae:4a:fd:02:ee:9a:ae:34:20:
3e:1f:a3:4b:ab:5a:e4:98:c6:46:6e:81:68:e5:6d:41:40:cd:
a6:c3:8d:d1:0d:67:55:29:e3:99:db:b4:7d:52:5a:b7:97:c8:
23:4c:cd:a7:26:13:4d:3e:1b:e3:5d:80:9b:12:bf:c7:71:cf:
98:6c:e3:7f:0a:fd:1e:f6:28:cc:d5:b8:f7:ac:12:dc:fa:d8:
15:ff:49:92:35:a3:ec:bf:9d:ac:a5:78:a2:5b:5d:7f:df:65:
a8:9f:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:18 2026 by rpki-client