Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: ZWRExPs1o/1PYS7+wn1Z5e3z+12w/Xi4F2fwtY9pUDU=
Subject key identifier: A1:30:5D:65:73:A6:2E:A8:AE:3D:31:26:59:11:A5:08:3E:DD:33:F3
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019CABD9EDCE82B9407B21C289922575B5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: oSUcgSdPoIhmIqm3ZGJjN1QdzbklejxUVF887148rZU=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ed:ce:82:b9:40:7b:21:c2:89:92:25:75:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=a1305d6573a62ea8ae3d31265911a5083edd33f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:8f:e6:a8:84:51:b9:5a:49:68:25:7b:5d:
ef:7d:7a:57:63:6b:20:7b:66:8a:f1:de:0f:b0:35:
00:0d:d8:e0:fb:3e:06:93:38:eb:76:46:73:77:48:
f4:37:c0:67:85:73:28:f8:8c:08:78:2e:a0:26:08:
64:06:d9:e3:7a:97:5e:58:c5:95:2b:5b:af:c8:22:
99:72:f0:c8:c8:5d:c5:83:bb:cd:7c:2b:73:ce:b4:
83:e1:e3:e7:3c:24:53:b5:22:73:13:58:78:8b:3d:
99:6a:60:f1:fd:52:16:55:49:ff:b1:57:ec:99:3d:
eb:44:58:59:4b:97:ec:d1:4b:03:1b:7c:20:ad:40:
f7:ee:28:65:4f:fa:f4:be:57:41:ef:0e:54:1d:02:
04:f4:73:e6:c1:53:a9:05:4e:86:1b:f5:fc:e8:dc:
d6:e7:8e:0a:f9:b6:01:95:73:d4:f5:96:43:5c:f7:
da:ea:01:d2:fb:94:a9:99:bc:7b:08:e2:6a:c7:ac:
0b:9f:7d:7f:9f:b1:1b:6a:27:9e:3f:52:1f:e6:78:
a6:c3:de:fd:f9:51:3f:fa:67:51:ff:79:64:6e:b1:
aa:d8:27:ac:28:3f:d9:29:36:67:a3:0f:fe:f6:32:
db:0b:6f:8a:25:96:a9:5c:48:8d:dc:81:51:79:32:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:5D:65:73:A6:2E:A8:AE:3D:31:26:59:11:A5:08:3E:DD:33:F3
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fe:c5:9c:9c:1d:7d:18:ec:62:a5:6d:4a:4e:dd:26:e0:83:
8b:8c:78:b5:84:61:8c:32:8b:f9:10:c3:27:a5:c8:16:6f:9a:
e3:47:5b:7c:a6:ce:53:81:3c:ed:7e:59:45:df:88:e7:6f:b2:
9f:c8:58:4f:ca:1a:a2:9d:f8:eb:3a:83:57:1d:36:28:81:8b:
93:d8:c5:a8:6e:a7:05:81:a1:6e:b9:02:f0:c7:82:24:a5:fb:
61:e6:b3:74:f6:04:e5:66:19:c6:b6:0a:50:64:34:8c:69:8e:
f2:fb:dc:be:7d:b9:8f:11:a2:d6:3c:da:ba:55:1d:80:be:2a:
a7:7e:44:c5:09:58:2b:a3:0c:6c:b4:47:2f:a8:80:16:d9:84:
4d:c1:2e:64:cd:2e:51:6d:b7:2a:6a:08:e3:dd:85:bc:cc:43:
75:cd:31:e3:33:86:19:35:ba:35:99:83:57:0c:5c:65:17:28:
ec:bc:cc:e4:19:f7:e3:53:2f:0e:61:37:02:4f:38:e0:f7:8f:
4e:f9:0b:4b:fe:92:6b:50:9d:ce:6e:b5:7b:dc:71:58:d5:b2:
7b:cf:0c:3b:39:bb:c7:95:a7:99:ce:3c:bd:7a:f1:b5:2f:6d:
0e:c6:d0:5f:44:e2:09:fb:bf:cc:fa:cd:8f:77:a0:16:b0:5e:
85:2d:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:12 2026 by rpki-client