Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: hr9JIEhIno1xM/wZAKYJUKj72gy1YDmst0ZbPNbgmrg=
Subject key identifier: 3C:50:5B:C0:42:CE:74:8C:A3:E2:25:B5:CE:2F:C4:6D:1A:A1:36:6A
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 019CAB6B47040EF0DE48941671607123C220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: CKlV9uqu9ctKYmE/OV2SburASEcuTC4jFOYpdWBc3mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:47:04:0e:f0:de:48:94:16:71:60:71:23:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=3c505bc042ce748ca3e225b5ce2fc46d1aa1366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:65:1a:6a:16:44:f2:4f:39:0f:d2:e7:75:
ea:c5:5a:27:cc:63:47:d7:82:bb:17:7d:89:18:39:
ae:fc:a9:81:00:81:37:4d:ad:c8:54:d3:42:bc:22:
d3:31:00:16:0a:7d:41:a8:76:5e:43:e0:48:11:ba:
18:47:1f:11:c0:89:2e:7b:5e:dd:ad:9c:53:6a:65:
86:e6:73:83:33:be:b6:7d:1a:0f:67:90:7a:f7:7b:
9b:a9:7a:15:f5:48:35:95:03:9f:a6:49:b9:8d:99:
6f:c3:dc:e3:bf:ab:ce:69:d7:90:77:22:0e:23:64:
db:76:2a:8c:b0:c9:4d:0e:2e:87:73:9d:2b:cf:cc:
af:35:a2:d7:70:95:6e:fb:22:d8:0f:a9:a2:a3:a1:
2e:71:c9:38:2a:cc:9d:37:70:c7:22:fb:33:d8:5a:
78:37:12:1b:11:dc:bf:8b:ba:dd:d1:6f:c6:03:76:
9d:ed:ca:f5:2c:9e:00:c6:19:cc:ae:ed:3a:10:29:
aa:8a:d6:bb:50:16:9e:4f:19:37:d4:52:60:1d:b6:
1d:8d:47:b8:c1:2e:bd:5c:f3:56:5e:c6:f4:bd:bf:
78:fc:0f:9a:f2:5c:12:cd:0e:7f:b2:0f:ce:bc:3a:
c5:5a:06:d1:63:5c:bc:54:61:52:21:df:9f:b9:0b:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:5B:C0:42:CE:74:8C:A3:E2:25:B5:CE:2F:C4:6D:1A:A1:36:6A
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1e:07:a2:0b:13:3f:7f:55:31:06:6b:ed:55:0a:7d:fc:9a:
c5:21:e4:f0:f4:ed:e4:92:24:c1:ba:76:9c:98:54:62:60:71:
db:51:c8:60:d8:54:8c:b0:4d:0c:df:ff:04:b5:a0:55:60:19:
9b:7a:41:3f:ea:bc:c7:c3:67:10:ad:8a:00:51:5b:84:b9:93:
87:fc:d8:d3:3b:0e:da:03:15:84:c5:6a:da:57:50:cc:73:ee:
53:be:b0:9b:7f:a5:bb:b6:b1:bc:1c:aa:51:a4:d2:4f:7d:73:
0c:6d:0d:5b:04:c1:23:78:77:8b:2e:61:88:2e:65:2a:7e:70:
a5:7c:f3:af:1b:48:2e:20:51:18:ac:e9:61:24:19:24:68:a5:
3f:8a:ae:45:f7:7a:ca:e5:18:96:32:69:03:dd:09:a6:4d:a9:
c3:11:73:46:9f:e7:91:cd:cc:1a:65:2b:24:b7:43:1b:9e:6f:
74:57:41:e0:29:0d:e1:ed:33:44:d0:4a:82:d7:9d:3a:36:7e:
36:c0:cb:7d:fc:85:70:6a:db:c2:80:aa:1d:1e:a4:e7:53:f6:
d8:e9:d2:5a:aa:45:27:c7:a0:73:49:3d:26:b4:4e:dc:59:ab:
bd:72:e9:20:b7:4a:ae:9d:7e:40:7b:39:44:3b:83:f7:89:bb:
2f:18:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:45 2026 by rpki-client