Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: KX4f1VsjMxxxUX6WggQlzSMK1LO4v7rOuu54q9XjH3E=
Subject key identifier: 23:C2:B4:D0:A1:B3:5E:BA:04:A2:78:C9:D8:25:D0:A7:88:AE:44:1C
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 019CACEB4E7EA85C5F122CBB0AB9209CC906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 05:00:28 +0000
Manifest this update: Mon 02 Mar 2026 05:00:28 +0000
Manifest next update: Tue 03 Mar 2026 05:00:28 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: TmeM+5ltysONs/rb/SZy0kDnEWSMSUVA6ke5iAZ7pDE=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4e:7e:a8:5c:5f:12:2c:bb:0a:b9:20:9c:c9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Mar 2 05:00:28 2026 GMT
Not After : Mar 3 05:00:28 2026 GMT
Subject: CN=23c2b4d0a1b35eba04a278c9d825d0a788ae441c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:5a:34:4d:c8:09:aa:66:13:ff:5e:b3:21:
31:62:07:e3:10:f7:1a:15:c3:40:97:55:bf:eb:f9:
41:c3:93:a4:7b:16:15:5a:96:5f:14:94:b2:7b:ff:
ec:bc:db:a4:e9:c2:e5:12:ca:21:bc:09:97:4c:2d:
24:a2:8a:33:cf:a2:6e:07:88:ce:f4:e8:19:be:16:
d3:2d:c3:47:b5:0a:f8:a1:87:8f:2b:1e:6f:f6:b9:
7a:bb:cd:8b:a5:71:5a:f8:d8:51:a8:46:39:c9:06:
84:84:f4:d2:b7:e4:a0:97:f8:8e:55:28:be:2b:20:
f0:ff:2a:b3:fe:89:f5:12:3c:22:2a:1a:5b:c3:e2:
63:8b:8e:95:50:39:6e:f5:ce:12:15:13:0e:99:15:
73:78:ba:74:35:56:ac:c3:e7:7f:db:ff:1b:b7:5b:
d3:12:8c:24:5d:42:ee:cf:37:df:06:03:e4:00:99:
87:8d:4d:82:ef:2d:8d:26:45:b9:fb:66:ef:3b:78:
50:e7:b1:86:46:d7:17:8f:dc:b6:f4:70:d2:76:f9:
6a:8c:b3:6c:0a:94:29:91:c2:bd:09:e6:62:bd:1f:
29:f2:b6:5d:e3:61:f9:c5:1f:1b:61:a3:d6:0c:84:
5e:01:a4:3e:b6:9f:ce:f7:dd:e7:1c:23:b8:e6:0a:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:B4:D0:A1:B3:5E:BA:04:A2:78:C9:D8:25:D0:A7:88:AE:44:1C
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f6:c8:74:9e:0e:a6:66:e6:0b:74:bb:bb:9d:a0:9f:91:95:
14:a1:33:4d:3a:75:6f:20:9b:cf:d7:e6:b3:56:e3:f3:bb:bd:
cf:55:3a:49:77:e2:57:0d:a0:10:63:52:a4:80:f0:73:e7:85:
ce:60:7b:e4:da:1a:7b:34:be:f3:06:84:95:f0:a7:5c:e5:e8:
c1:33:3a:ad:5f:bd:f9:f9:bc:cc:e0:0e:d7:f6:38:eb:94:c0:
9f:62:1c:3d:51:a4:ca:24:5a:d7:f1:df:34:21:8a:fe:7b:d1:
fb:d3:da:dd:48:e1:3d:7d:5e:b8:4b:83:b2:ae:ac:ef:53:5e:
bf:42:bd:9d:95:d5:3c:22:54:40:51:65:3b:43:53:45:97:30:
fe:87:ac:db:05:24:7c:42:9e:a6:f8:3a:a6:f8:cf:69:11:61:
c1:79:cb:2d:58:fc:d9:51:3d:10:2e:31:45:f8:33:84:d1:00:
51:5e:93:89:3f:65:f3:52:b2:27:33:14:ae:99:46:05:b0:9f:
5e:ed:5e:8e:74:89:36:15:f5:d1:d9:a5:5c:9b:bd:51:20:a8:
11:6a:f9:1f:73:af:22:ea:c0:f2:91:88:87:bc:7d:3b:b7:ba:
56:87:6d:16:61:39:58:59:75:c9:98:dc:2f:b3:5d:7c:a7:f7:
00:62:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:50 2026 by rpki-client