Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: hvrPhrhuVqAEmbnppx0pAOQn53pUODmAjqIoZBMI0+E=
Subject key identifier: 95:1B:AA:D3:28:4D:8F:9D:BA:F1:6F:8C:4D:F2:19:71:D2:CC:E3:A8
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019D27724F3A9E3F42F1B31B6EE8C962E9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: MWUnw0G46lHaQ6YodVw79Br25qSGrVqRBjTYuK8jQsw=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4f:3a:9e:3f:42:f1:b3:1b:6e:e8:c9:62:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=951baad3284d8f9dbaf16f8c4df21971d2cce3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:21:67:57:17:7b:c0:3c:2c:e9:6c:0a:03:
bc:d6:ae:47:ba:a5:a2:d8:2d:bf:db:34:51:1b:7e:
eb:ad:fe:8e:d2:f3:90:19:ec:31:de:d4:42:07:64:
99:7d:98:11:49:df:cb:d8:8e:46:82:50:14:dd:84:
7f:e6:5e:c5:ed:c0:4b:68:9f:b7:1a:b6:f7:df:53:
d5:32:1b:f6:7a:d2:38:6d:e3:05:48:a1:f9:87:09:
2a:b3:61:c9:98:98:2e:f0:3d:08:b0:55:82:e9:57:
0a:67:f6:34:17:a7:8e:8d:ea:8f:f3:31:64:66:f4:
f1:12:5f:a2:db:1e:1c:55:9b:a8:6c:d5:84:1f:60:
b0:f4:8c:f1:aa:c1:14:b2:bb:51:1a:65:e8:01:a7:
bd:7f:cf:2d:a3:f4:6e:a5:e2:8a:fc:5e:b0:f3:a7:
f7:b3:dd:e1:f8:dc:38:b8:ef:23:c9:ba:62:e6:c4:
2b:81:95:6b:16:81:0b:aa:22:b4:52:3e:57:51:f5:
cf:ab:1f:c1:81:5a:c7:3d:e9:a1:0e:41:e4:2d:7d:
ef:15:6e:46:fa:ca:af:b0:19:08:b8:aa:bd:8a:71:
0d:c9:2e:9a:80:8a:00:5e:85:45:56:c8:5a:db:a2:
6a:d2:af:f2:34:60:08:ed:99:99:b5:60:84:e7:56:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:AA:D3:28:4D:8F:9D:BA:F1:6F:8C:4D:F2:19:71:D2:CC:E3:A8
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:85:c6:41:9b:a4:e5:e0:df:77:ac:84:02:17:69:5a:b9:
e7:15:ee:cd:60:bb:0a:36:32:24:e8:9b:d7:cd:9c:53:30:68:
c3:f8:11:7d:2f:5f:23:cb:73:a2:38:9e:7e:62:1a:4e:3f:6c:
88:6e:a5:4c:47:ed:07:39:c0:f7:44:14:7f:ab:b9:5f:87:63:
9d:c6:51:ad:95:4b:ef:39:76:17:b9:35:33:93:1d:cd:ee:6a:
dc:22:4b:db:fc:b6:11:37:7f:4e:a9:e7:c0:31:45:a2:f9:1d:
cb:55:2a:22:57:d6:1f:34:34:b2:b8:0f:85:85:76:c6:39:0a:
6d:51:f7:96:97:81:cc:36:d5:39:75:c2:72:89:5c:7f:de:11:
0a:70:2c:df:ce:cc:2f:0f:cd:11:cf:ff:9b:e3:18:41:0d:f9:
3a:0a:55:2c:19:ec:91:dc:63:0e:bf:e7:9f:63:81:67:7b:c2:
d6:ee:b0:fe:06:68:1e:4a:02:3d:56:2d:7c:24:12:27:23:6b:
47:37:16:78:43:0c:f1:30:bb:ce:0d:62:bf:e1:8a:9a:fb:1c:
37:1b:c6:96:05:4c:04:2d:f8:d3:e0:9b:35:d6:62:4f:ef:38:
cf:27:47:c3:a1:e0:30:fa:0c:34:67:e1:f5:4c:cf:58:8d:e8:
c4:79:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:52:54 2026 by rpki-client