Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: PR1L91kNzmBEej35tpMze0WUwOqC/KeVLmP4ehrlBpw=
Subject key identifier: 32:03:9A:27:1F:D7:64:42:71:34:83:41:88:B8:EB:4E:8F:5C:12:52
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019CACB4F7B9C8BD685F31DF89E9314C2AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 122D
Signing time: Mon 02 Mar 2026 04:01:06 +0000
Manifest this update: Mon 02 Mar 2026 04:01:06 +0000
Manifest next update: Tue 03 Mar 2026 04:01:06 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: Y2fDarFZEBRzUiAWV16p/nFwL+MlLyhQAesPcNjxtYY=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f7:b9:c8:bd:68:5f:31:df:89:e9:31:4c:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Mar 2 04:01:06 2026 GMT
Not After : Mar 3 04:01:06 2026 GMT
Subject: CN=32039a271fd764427134834188b8eb4e8f5c1252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:3e:6f:65:aa:90:89:50:55:63:a5:50:9a:
93:d9:55:72:6e:00:19:55:65:ce:24:1c:c0:bc:62:
e2:29:b7:cc:61:c7:85:50:3b:04:a7:e2:2d:79:11:
6d:63:f8:95:ae:26:1b:f9:a9:db:87:4e:8e:23:26:
39:7b:e6:94:d5:27:0f:de:b4:87:0c:93:50:7c:16:
e5:cc:bd:a2:b4:d4:15:2e:a1:64:2f:e9:ef:0a:8f:
18:88:e4:ef:94:c8:fa:02:e4:79:b0:d7:5a:99:74:
57:4b:40:71:c3:22:38:68:37:bc:92:96:7c:41:31:
1d:e3:78:47:54:90:b7:25:72:09:8f:78:e0:d2:30:
d6:17:ba:59:d5:8b:0a:2e:0c:40:06:fd:49:0f:ac:
b9:03:3b:6a:e7:ef:42:32:de:85:c0:3d:34:97:82:
bf:b6:b5:73:df:e9:39:ac:c6:65:eb:7c:75:d7:ac:
d0:e0:2e:54:8a:68:9e:de:45:bf:0e:54:52:da:27:
0d:5b:23:d7:4a:4f:be:dd:70:9d:de:4f:2d:4c:e6:
45:1e:bc:51:38:fd:23:1d:58:38:b2:f7:60:27:b3:
03:da:b6:60:4e:8b:e7:77:a6:4c:fd:db:f1:1b:80:
a8:67:bd:d0:54:c1:55:2a:ac:14:68:c8:7f:5a:fc:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:9A:27:1F:D7:64:42:71:34:83:41:88:B8:EB:4E:8F:5C:12:52
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b4:ab:d2:3f:d9:77:54:44:b3:83:0c:9c:73:1d:3f:19:4e:
01:47:f7:f4:fa:03:59:d1:5c:91:a9:c7:c1:13:40:53:e5:92:
1e:0c:ce:e1:2e:4b:0d:1e:a4:75:c6:5a:bb:93:f6:cf:36:bf:
e9:51:63:e8:3a:08:eb:77:4c:1e:18:3d:d3:67:e9:8a:f0:1d:
8b:37:c5:44:5d:57:f1:ae:bd:c7:95:d1:25:33:df:50:27:34:
94:ff:c2:e1:e1:be:c8:73:35:b8:dd:11:74:8e:a0:ed:a8:b3:
d1:0f:ee:87:a1:a2:5a:9f:d2:21:32:27:5b:c0:21:8d:88:e6:
33:9a:e6:c3:e7:e8:1a:e6:49:0b:ee:96:4e:9e:4f:2d:66:5d:
97:35:ad:15:50:b9:03:ec:0a:d3:d9:63:70:86:ee:35:4f:de:
71:91:e0:5b:3c:31:d4:cc:9e:f0:03:be:c9:86:0d:55:72:f4:
5f:06:04:ec:2b:c5:8f:34:fe:24:b9:12:65:ed:b7:53:cc:7c:
60:0c:d5:d2:07:8d:fe:c9:83:74:b1:45:98:ca:66:50:40:fc:
31:80:a2:eb:48:fd:23:9b:a4:0d:f1:40:52:66:47:a7:72:83:
d8:61:db:ea:ac:0f:5c:50:30:c1:0d:ef:ed:dc:9d:c5:f5:8a:
78:45:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:05 2026 by rpki-client