Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: oh2dVoEcriMmNZvJT4aTMq913Rpm3lmFQks6Nq4ld5c=
Subject key identifier: AD:E7:75:05:EC:8C:3F:4B:E9:E3:86:21:49:30:4A:A5:47:F1:A1:EA
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 019CAE351AF5D932FDE1CB5067D49A0C60EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 138B
Signing time: Mon 02 Mar 2026 11:00:41 +0000
Manifest this update: Mon 02 Mar 2026 11:00:41 +0000
Manifest next update: Tue 03 Mar 2026 11:00:41 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: mw5m7EOoKqKBaNSqy2OXXSFEcwZsNTGBcPevePA6zt0=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:1a:f5:d9:32:fd:e1:cb:50:67:d4:9a:0c:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Mar 2 11:00:41 2026 GMT
Not After : Mar 3 11:00:41 2026 GMT
Subject: CN=ade77505ec8c3f4be9e3862149304aa547f1a1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:ca:57:f6:31:7d:29:f5:24:eb:78:04:bf:
73:de:a5:20:0f:18:45:6e:e5:5c:e3:3e:1a:83:68:
fe:b8:d5:7e:4d:58:49:12:d3:a9:48:e3:3e:65:f9:
61:0a:c5:ae:7b:93:17:b0:74:77:16:4c:a1:43:8c:
f4:69:d7:f8:b3:aa:b2:7c:12:a1:4e:19:5d:a8:3f:
6f:52:a2:55:82:32:f3:8c:84:68:85:0b:33:cd:87:
df:20:68:ac:16:4e:bd:f6:b1:b8:18:50:20:c7:6f:
7d:9b:09:7f:7a:80:21:f6:42:b3:6f:4f:43:ec:61:
8b:0d:35:b2:fc:87:76:95:9b:fc:4c:ab:7b:7f:ae:
63:70:f3:06:69:f9:32:2e:29:bc:8b:02:02:3e:c9:
e9:ef:01:84:2d:b6:13:61:38:4d:45:6a:8c:42:38:
35:19:44:c4:91:a9:cc:f9:22:f4:e8:67:97:84:95:
a8:82:cf:2a:87:12:a3:97:e7:f4:8c:66:8d:6b:91:
2c:01:e2:87:e2:8a:49:9a:aa:7b:2e:af:7e:a3:f6:
ea:ad:78:ee:83:43:ff:bd:c3:d8:ba:14:dc:93:76:
a2:ee:34:2b:7e:b4:6e:93:0f:8b:34:9a:d2:98:ea:
d2:28:f6:2b:2e:df:dd:21:70:c5:b2:51:0a:51:6a:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:75:05:EC:8C:3F:4B:E9:E3:86:21:49:30:4A:A5:47:F1:A1:EA
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:fd:ad:de:0d:08:ea:00:f2:29:0e:d8:27:2d:e9:0e:7b:
7e:48:32:f3:84:ad:f9:5d:01:14:7c:82:19:a4:f0:f5:4d:7c:
71:f3:84:fe:21:ed:b1:d9:cf:2e:a7:b1:1e:47:81:eb:f5:24:
46:20:83:02:ef:d2:e3:c4:70:fa:06:ef:09:88:b0:0c:d1:14:
56:39:31:6d:b8:3c:ee:f6:b0:dd:98:cf:f1:32:be:d5:46:c5:
8f:13:e9:6e:71:45:05:44:c3:83:fc:b5:22:03:88:e6:33:95:
94:13:45:a0:d1:94:48:8d:a2:c2:de:39:8f:e0:7b:2f:97:3a:
f9:c1:af:8c:30:13:11:52:7c:b7:6c:17:36:77:82:c8:00:ad:
65:a1:8d:e2:c3:01:de:a3:e2:8f:e3:b7:7a:ef:31:65:7b:d3:
ab:3a:42:d4:c8:a1:c2:aa:60:81:80:bd:4a:5b:9d:c9:86:c6:
fb:23:5d:c8:29:9b:44:27:03:76:e9:23:eb:19:f3:99:a0:3f:
77:23:5a:23:aa:89:24:c2:68:56:09:e3:7a:d4:5e:f8:28:81:
0a:ce:91:fd:f0:fc:1f:7d:a7:53:ed:37:c3:5e:08:9c:d8:f8:
ba:7f:fe:27:68:1e:d5:ab:e9:b6:fb:45:e2:6d:73:fa:44:7d:
f4:68:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:37 2026 by rpki-client