Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: hSO0grnV62/hGAXyZQZCHXfCu7ZuI5wRZ3dcBXSzoMY=
Subject key identifier: 02:25:10:01:08:61:52:06:42:FD:8C:9C:4E:0F:3D:33:17:C4:5F:5F
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019CACEBEEC2B64B4DB6A38DA83EC54B211E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 07F0
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: 7CzsFHpg60dvqJIG/J9uCUnRY9N8R0cVbAgIQrSg+Xw=)
2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ee:c2:b6:4b:4d:b6:a3:8d:a8:3e:c5:4b:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=022510010861520642fd8c9c4e0f3d3317c45f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:5c:17:26:ba:73:71:8d:98:8f:2e:d8:0b:
80:b9:54:93:f6:15:4e:24:43:89:c3:51:73:ef:cc:
40:f4:fd:c2:24:72:8e:62:46:4a:39:b3:f7:eb:71:
bf:c9:b3:b4:d4:1f:ef:e1:e0:e3:7a:d1:c6:48:ef:
fb:e4:32:e0:89:bb:21:2d:b5:a9:61:4b:2d:89:de:
8f:86:f1:98:46:78:e9:9c:7c:56:b2:58:5d:c3:85:
d5:fe:46:90:ec:78:04:cb:fd:e0:18:d5:64:a2:b3:
af:d9:03:1b:3b:8e:7e:df:1a:73:00:c4:9c:6e:7b:
48:83:3d:99:bc:cd:d9:4e:8b:3d:9e:bc:32:cd:a7:
c8:2d:c7:cc:57:d9:93:40:42:d0:2c:95:bc:e0:6d:
a1:e7:fa:af:b0:81:6f:1b:23:d1:6c:18:b7:a1:dd:
87:ab:dc:b4:96:14:2f:a1:f9:4f:8a:c7:ae:57:05:
22:57:c5:da:8a:be:27:28:49:0e:94:06:0d:1e:2e:
d5:62:7e:05:2e:8c:2c:63:ca:44:3f:02:54:96:7f:
31:99:0f:06:b9:47:22:6e:a5:de:6f:7a:18:d4:68:
93:3d:10:9f:c0:3a:27:4a:ec:27:df:d6:a4:03:ba:
27:82:cd:c6:c7:1b:3f:de:13:81:64:3e:cf:ae:5e:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:10:01:08:61:52:06:42:FD:8C:9C:4E:0F:3D:33:17:C4:5F:5F
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fa:9a:4f:c7:90:69:b5:56:e3:d9:89:18:92:ed:7c:af:93:
9c:37:48:5b:0e:67:14:d2:54:e8:dd:1c:82:28:d8:c5:a5:4b:
9d:e0:54:cb:eb:4a:24:c9:44:fd:6f:36:e8:86:78:35:c2:7f:
3f:56:d0:a0:43:4c:03:ea:c2:5c:ca:ea:96:8e:dd:ef:fe:4c:
1e:44:72:f3:20:5d:f9:42:c9:79:8a:be:0e:7d:55:e5:ea:20:
0f:3c:ae:ca:60:15:c6:9f:17:21:5a:9f:2d:7a:fa:8c:65:52:
22:ae:a0:d0:0b:c2:34:d3:08:55:88:38:db:75:2b:06:d8:b0:
ba:a2:b3:3e:ff:15:21:26:0a:c1:3f:44:5b:9e:5f:46:8f:70:
a6:5c:70:43:79:51:65:36:35:74:c9:9a:7c:40:2a:54:55:1d:
7d:04:2e:0f:04:9d:8c:80:87:57:fc:fa:7b:73:84:f4:42:a5:
c8:8e:8c:53:da:d8:a1:e4:c0:41:00:5f:1f:9d:ee:8f:53:f3:
35:78:0d:43:04:74:c5:4d:74:84:e9:f6:4a:2f:32:8f:71:e9:
1c:de:c3:c5:56:45:8b:54:46:1d:49:ff:6c:81:73:e5:d2:dc:
b0:40:49:a9:f6:40:94:8b:ea:4b:b0:0f:52:a5:f9:b3:ed:4e:
61:65:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:39 2026 by rpki-client