Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
File: 3f20crHtWewvNw8g-rSHlDnFMY8.mft (raw, json)
Hash identifier: N3HYrvdPsPB5J9arhZWnhoAr7ipRJXG+ih9B3+N+fD4=
Subject key identifier: E2:4D:1B:27:3C:08:9F:25:53:AC:E8:79:6E:4A:09:7A:8C:6A:52:E0
Authority key identifier: DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
Certificate issuer: /CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Certificate serial: 019D2704D73E293E122E2836B3C8E6FEBDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: 3f20crHtWewvNw8g-rSHlDnFMY8.crl (hash: egknPyp8/vxxci2EuC/AdDvaqVmA2rY+87zSiHj/3AY=)
2: ZMQkud9K3mvXdpjh-yoqav-Fm2A.roa (hash: rezLl6nocyRRaT4FpZnJ5CHwHhiv5ot72qwHgOZEFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d7:3e:29:3e:12:2e:28:36:b3:c8:e6:fe:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=e24d1b273c089f2553ace8796e4a097a8c6a52e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:7d:b5:c0:ee:16:04:32:1c:0a:75:33:42:
33:a1:92:59:84:c8:39:7e:9c:c7:a2:2e:91:9d:79:
47:8d:b4:96:7c:99:a6:f8:b3:17:c5:2e:e8:85:f2:
92:b5:99:7b:1c:33:dc:48:31:fd:f4:69:96:bd:27:
6f:54:42:48:5f:e9:47:c0:4b:66:6f:b9:dc:eb:31:
b4:23:0c:64:2a:90:78:11:90:79:8c:b5:8d:a8:ea:
ff:94:d8:d8:89:86:13:23:4b:19:8a:d0:31:c0:9b:
3b:df:93:69:e4:73:35:50:11:88:98:0b:fd:3d:68:
d1:27:91:7f:29:94:09:a3:d0:4e:78:f3:d5:d0:92:
b4:93:4b:b7:a3:0a:7a:cd:eb:4c:56:ac:dd:94:a8:
dd:f9:07:fd:05:bd:89:a9:16:6b:30:5f:49:e8:68:
1d:58:be:1b:50:53:b1:36:8a:e6:cd:13:ea:75:ee:
e4:d7:1e:25:d5:c1:6d:07:ae:45:35:f9:a9:60:4e:
12:81:54:f1:75:4a:a2:79:19:9a:b9:c4:97:54:e5:
3b:35:75:cd:0e:1f:b1:5d:a3:ed:b8:ff:d5:bc:0b:
3c:33:1a:58:e4:0a:b2:97:e8:e7:06:87:d2:e4:90:
a9:3d:d9:8e:94:c1:fa:8c:67:a9:72:c8:a1:e2:fa:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:1B:27:3C:08:9F:25:53:AC:E8:79:6E:4A:09:7A:8C:6A:52:E0
X509v3 Authority Key Identifier:
keyid:DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6f:6d:1f:1e:64:6d:ab:07:c6:aa:9e:09:ce:11:b2:f0:6f:
50:97:eb:32:37:89:d4:f7:40:90:5e:98:b1:0f:57:25:f6:fe:
b9:3e:7e:2d:ac:0f:0b:86:06:76:26:23:0e:74:c1:8d:9f:8f:
08:b5:0a:34:5d:2a:f8:c2:9f:52:69:c1:53:c8:87:39:e3:b0:
32:62:ed:28:13:21:c3:8d:ad:4b:d8:77:5a:05:7e:cc:2e:db:
70:ca:f9:4d:45:14:3f:98:a6:9d:48:65:aa:5f:af:a3:f6:b4:
02:0c:29:1f:60:7e:c0:a1:8b:c7:fe:b6:cb:b5:ab:97:ab:df:
38:6a:6e:6c:ac:68:1e:f4:84:4f:69:83:09:93:05:a6:ef:a9:
63:8d:88:3f:10:4f:76:0e:59:08:b0:c1:5b:b4:6a:eb:46:10:
4f:2d:fe:98:f1:65:19:f8:62:ad:86:fd:d1:ae:5f:e4:d7:00:
f5:ff:ad:c4:d7:f1:f4:d6:0e:4e:26:35:55:dd:d8:65:90:3e:
a8:1c:7f:3e:2c:bb:f7:24:f2:e6:55:35:44:21:24:57:48:95:
32:f8:f0:12:df:55:c7:98:45:db:55:d1:ef:28:76:9f:9e:de:
e5:6e:6d:2b:ae:73:66:95:bb:57:6a:d0:bc:58:24:b5:45:a5:
71:fd:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:43 2026 by rpki-client