Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: ObAMAh2QugPqr9kU9l7A+w9a5VE/o3/Ov5GJrDuy6qw=
Subject key identifier: C9:8D:9F:22:57:95:B3:92:DC:BF:F4:34:2F:B0:39:42:1B:B5:D2:88
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019CAA8FC4BCC13065DE2C4C888611A4AADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 093F
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: 3tkWEVYl6UmTqF995K4w+Cgw6crj/70RLQHvYvCSHSM=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c4:bc:c1:30:65:de:2c:4c:88:86:11:a4:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=c98d9f225795b392dcbff4342fb039421bb5d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:4e:31:c5:f7:68:64:fc:5b:44:a4:c6:38:
ed:65:4c:4e:b3:35:7c:20:b1:3a:68:b8:c6:1d:fe:
01:de:d0:39:c7:60:27:c8:d2:c4:f3:44:27:7c:06:
b2:28:89:d7:3b:98:3d:d5:e4:43:09:75:de:52:0a:
40:f7:bd:01:5e:c0:87:4c:51:b5:4c:10:4c:4a:b8:
17:6e:d5:33:de:bf:e0:c1:55:db:3a:02:35:6e:f8:
6f:d0:3e:21:e5:e0:3e:58:b1:dc:2e:02:ba:83:ff:
2b:49:c4:9d:9e:d5:c9:2c:ec:da:3c:a9:e2:6e:e3:
2e:e4:12:c6:ff:ba:5a:4c:f4:9f:c2:e9:49:3c:3e:
57:d9:06:17:28:f6:15:ed:dd:05:c8:d3:d3:f6:ca:
3b:e6:02:8a:59:27:d9:5a:da:6f:ce:d6:bc:2b:bb:
ec:00:33:c4:28:fc:f9:a0:76:cc:b2:e8:c6:d9:5c:
5c:8f:30:e0:90:df:03:ee:60:58:f5:81:bd:63:43:
62:fb:01:21:06:9b:2c:dc:dd:dc:f2:7b:b9:8b:57:
46:31:81:9d:1e:91:28:3d:82:ae:63:f7:da:26:bc:
d4:d8:f2:43:f2:64:92:72:02:16:15:8b:44:98:33:
df:e6:c2:b6:9f:5c:50:44:c0:30:24:c9:18:c0:b7:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:9F:22:57:95:B3:92:DC:BF:F4:34:2F:B0:39:42:1B:B5:D2:88
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f8:20:84:bf:09:bb:d0:ac:4d:de:ee:d8:f4:41:35:17:51:
0c:b8:41:e0:51:b9:a4:bd:17:b8:a1:52:fc:45:eb:31:ad:e6:
b6:bd:cf:4c:f1:36:b2:a9:b6:06:dd:2b:d3:42:18:84:3b:b7:
26:94:2c:58:e7:29:98:2e:5a:64:6d:75:22:af:0b:9a:09:82:
40:09:bd:c1:a2:0d:0a:c3:18:94:d2:2f:29:6c:c3:02:8f:95:
6e:2a:39:55:2e:05:af:a8:db:5e:85:cb:e5:0c:75:7c:84:34:
fc:61:b7:79:08:f2:b9:29:90:81:77:5f:46:34:19:72:9a:ae:
6f:1b:2a:ed:ad:2d:ab:fd:4d:07:b4:38:64:ac:40:43:ba:4d:
19:e4:06:a4:fe:04:0c:f7:52:67:2a:37:dc:3f:8e:b1:fe:35:
b8:5a:5f:2f:6d:55:5c:eb:41:8a:34:09:23:8d:32:eb:d0:e5:
d2:42:75:95:47:b9:a2:56:05:31:e4:d4:60:5a:58:80:9f:87:
c1:94:41:15:28:99:8d:a1:f7:15:3d:df:da:2b:bf:69:d3:e2:
f4:00:83:cf:0c:ab:08:ae:0f:1e:8c:a5:d6:90:fc:e7:6e:9c:
20:33:3d:a3:76:b9:2f:0f:54:4e:d9:49:76:48:b7:f4:97:78:
df:98:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:39 2026 by rpki-client