Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: 4S/m1IDXgtJFKVo3piv096XOahxU7SZhFA1UBk3f0Fw=
Subject key identifier: 28:67:44:AD:34:A4:62:AA:05:6A:6E:F6:D1:F2:B4:94:8B:BF:8D:85
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019CAB34A2766DD947F878230B2E473FE3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0955
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: zXDXT3bIji0ntcVYYE1o//GNWTyAoslvE7KYqgKss4A=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a2:76:6d:d9:47:f8:78:23:0b:2e:47:3f:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=286744ad34a462aa056a6ef6d1f2b4948bbf8d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:03:f3:25:d6:bc:aa:ab:82:bb:84:af:63:
10:48:bf:b5:10:8b:8d:94:50:e1:4d:ea:0e:fa:31:
50:c8:8d:b6:bd:29:2c:fb:99:cf:06:1d:4e:f7:05:
8a:8e:a5:b9:2f:9d:1c:6b:9b:3b:99:4c:ec:bc:c6:
61:f9:75:1f:c3:31:f4:30:a8:e3:58:3c:7c:d6:4f:
00:a3:85:cb:55:4f:12:86:2f:63:fd:64:9f:c3:8a:
4e:63:b2:50:44:ed:20:e5:8f:2f:a8:ac:da:b6:17:
30:2b:1a:fb:47:13:8d:25:09:e4:03:03:bd:de:c3:
6c:02:e3:8f:e5:29:4a:a6:23:9b:5f:bd:6d:b1:66:
49:81:f6:d6:d5:48:bf:fc:a9:4a:bf:2f:78:7f:29:
fd:25:e7:5f:19:70:27:81:53:1b:69:97:83:f6:05:
d2:9f:58:18:96:64:32:34:6f:e7:71:92:33:96:81:
fb:18:7b:0a:ea:8d:38:e5:21:62:e8:a2:68:53:26:
dd:20:ef:77:86:72:75:93:c7:1b:eb:36:86:a3:c0:
61:17:9b:e5:33:a5:87:ce:c6:bc:35:e8:e8:74:1f:
da:2e:95:80:c6:eb:08:1d:9b:89:cd:0d:28:7b:f6:
f5:67:d0:72:db:da:62:32:c7:a8:5e:1f:30:4d:24:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:44:AD:34:A4:62:AA:05:6A:6E:F6:D1:F2:B4:94:8B:BF:8D:85
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a6:71:7b:08:0d:da:79:30:b7:65:18:56:46:d7:32:1a:1d:
6e:95:ab:32:65:d3:dc:8b:2b:f2:d9:f9:1f:1d:94:c9:84:cb:
fe:ae:d4:d2:c7:ce:ff:28:6c:17:15:00:fc:06:7f:bf:be:df:
0c:dd:b4:ba:fa:7e:34:23:58:72:05:d7:ad:82:25:2f:f1:df:
44:30:ba:c9:47:1d:5f:04:09:d4:3c:01:fa:4e:48:c3:72:39:
e0:49:c4:b2:36:b6:b2:75:02:69:86:4a:dd:e9:e7:ca:2a:8f:
fb:f3:f4:ad:a0:a7:53:b4:08:ad:a4:85:10:43:ab:31:94:24:
98:b7:e3:12:c7:2a:5f:92:a5:30:a8:6a:2f:b3:ee:02:53:fe:
59:91:08:25:78:5a:85:a6:e0:1c:8f:29:51:2a:ad:49:d8:56:
43:24:88:49:d2:41:35:30:37:f7:c8:27:03:4b:88:a3:16:b6:
52:30:dc:93:ce:16:c2:60:b9:87:76:05:e6:1d:b5:76:9e:63:
a3:1a:1b:9b:c7:a1:fe:4d:c7:3f:d9:e2:ce:da:fb:8d:d6:22:
b7:3b:9b:89:5b:44:80:54:5b:23:32:36:4e:89:66:98:b1:ed:
74:a7:d7:28:00:8f:20:3f:17:3e:0a:d5:3d:e6:e9:e9:ea:c1:
3a:4f:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:36 2026 by rpki-client