Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.mft (raw, json)
Hash identifier: 1PK/VB8KzfNUD9QTN9o/rAilQt0pxJMHSm+2rCfIHbk=
Subject key identifier: 0F:71:95:31:FC:29:5E:7E:D5:68:AF:4A:1D:D7:7B:BA:96:82:5F:E7
Authority key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Certificate issuer: /CN=bb7752a719b740a0e0244dd29c6532f79151646b
Certificate serial: 019D29975B100924A857E895A1564787B239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
Manifest number: 033E
Signing time: Thu 26 Mar 2026 10:01:18 +0000
Manifest this update: Thu 26 Mar 2026 10:01:18 +0000
Manifest next update: Fri 27 Mar 2026 10:01:18 +0000
Files and hashes: 1: L3gW4MNmdb0yfPJGEwYdlY8_fqM.roa (hash: ivdcntVpXSIka4vCYKhRHNsu6xqEGJkVPOsPAJlSsGA=)
2: u3dSpxm3QKDgJE3SnGUy95FRZGs.crl (hash: uRhj8q40XP9HAZVgXaPSFVX+qq1qkfiZQ+1wpSBjMbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5b:10:09:24:a8:57:e8:95:a1:56:47:87:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Validity
Not Before: Mar 26 10:01:18 2026 GMT
Not After : Mar 27 10:01:18 2026 GMT
Subject: CN=0f719531fc295e7ed568af4a1dd77bba96825fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:b0:5e:bb:8f:99:e1:c7:8a:78:ac:42:ba:
e4:33:45:cd:82:4d:e1:50:85:e7:de:04:8f:12:8b:
3b:34:38:84:2a:f0:2a:8a:e7:89:f3:1e:5f:70:1f:
91:2e:0d:9b:3a:6b:e5:3a:d1:3a:c8:5b:77:07:cd:
18:46:f5:9c:7d:a8:35:05:4e:dd:8e:86:3c:b0:02:
d7:20:da:1b:d4:61:c5:8d:53:73:e7:57:ef:98:e5:
d4:b1:c1:34:5b:b7:14:ae:e2:7e:fa:12:d2:f8:a6:
9a:c3:62:67:8e:b3:c6:f1:ae:3e:46:94:3d:ca:05:
b4:94:aa:18:9c:dc:bf:0d:da:0f:5a:50:41:d4:4f:
da:3b:4f:1e:e3:db:4e:bc:7d:ce:ca:d1:45:9b:0f:
63:53:ed:e6:69:c0:51:6a:3b:7c:9a:2f:49:ad:9e:
77:00:19:65:47:5f:2f:57:4f:e8:06:85:15:65:4e:
d2:ca:ca:32:58:26:eb:5f:4c:ed:cd:05:05:c9:e6:
72:a4:fb:04:d5:ac:02:e7:80:43:af:dc:91:06:e3:
b6:b4:2f:92:12:9d:93:84:1c:ca:45:8a:fe:e4:ac:
5f:cb:c9:da:d7:d3:d9:5e:43:11:7b:01:71:d4:db:
ff:21:40:78:79:5a:70:0a:af:04:da:cc:02:2f:ef:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:95:31:FC:29:5E:7E:D5:68:AF:4A:1D:D7:7B:BA:96:82:5F:E7
X509v3 Authority Key Identifier:
keyid:BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:6c:e7:5d:e6:c9:59:1e:05:7f:fd:cd:93:13:30:a9:2f:
2b:ee:f5:83:62:63:8e:0d:b4:22:06:98:25:61:4e:37:46:c2:
4a:2c:e5:ba:a0:cf:5c:7f:c7:2b:8a:26:16:94:ca:8e:af:2b:
c5:0c:03:51:2a:6f:86:ee:87:af:33:b5:6c:99:06:73:2b:17:
13:8e:86:a2:0f:61:6e:78:3b:ac:d9:a7:b9:07:17:45:59:50:
63:2b:39:bc:fa:17:b0:d5:66:8b:21:f4:91:10:1c:b1:13:92:
3a:e0:45:81:3e:d0:f0:a4:85:b3:64:23:f3:e3:8e:19:2c:b3:
e7:4d:0f:6a:78:28:f5:bd:5d:0d:d7:73:d3:71:c4:4e:8b:a9:
02:d3:6e:7e:44:a3:95:dd:cb:00:ac:c7:b7:1f:1b:d0:73:4e:
fe:68:06:26:ca:50:13:51:fe:14:4b:d0:b6:95:0a:f6:6b:27:
01:df:ec:ee:3f:8f:32:be:b5:62:39:ce:a6:22:68:9a:01:bc:
33:47:84:31:fc:a6:51:1d:c3:1f:1d:5c:09:50:c6:c4:c1:3d:
0d:bb:27:3f:23:17:16:ff:ad:0b:c0:d3:8f:9c:22:a5:0e:37:
c5:cc:ae:17:a5:5b:4b:96:f5:74:39:44:27:46:30:88:0f:f6:
52:c5:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:07 2026 by rpki-client