Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: oGfdJsXRW63vLgh9oSp2TfqokyQi1dWDQX+xeUL+uyM=
Subject key identifier: 43:B6:55:7D:D4:B9:14:53:A2:79:FF:44:55:8B:08:3D:76:6A:37:54
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 019CABD98A52E76FB9340E88A55D47552226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 1786
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: OVdwWkN6iC+arSig5VAsXpl7GYSkLNhNnDcjyW/B+ho=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8a:52:e7:6f:b9:34:0e:88:a5:5d:47:55:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=43b6557dd4b91453a279ff44558b083d766a3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:31:77:b7:07:34:19:a1:d8:dc:cd:81:a1:
8f:73:50:cc:da:3f:3b:43:01:70:61:99:76:7c:89:
53:b0:08:89:a0:5a:a1:93:7c:21:f6:70:1a:b9:16:
97:cb:75:f7:1b:4f:b9:d4:63:72:1d:54:5a:c8:50:
57:fe:93:7e:dd:e5:00:22:a4:ef:aa:12:e2:eb:d5:
3d:0a:dd:ec:07:28:c1:1a:c3:03:8c:dd:a0:64:04:
d8:91:3a:f0:ac:f8:a1:e6:61:fb:4f:06:4d:58:96:
aa:5d:18:a2:cd:10:ab:0f:92:fd:bf:64:de:35:ff:
24:06:f7:38:1d:e5:27:3c:95:a3:b1:cb:d6:af:01:
54:a4:3c:1b:d9:85:a3:c4:a4:b8:ad:b1:c9:72:df:
f7:b4:53:b0:7a:c9:44:f0:46:9c:5c:60:89:51:9b:
91:c9:74:18:7d:e6:55:fe:43:f8:c4:41:fe:54:78:
9e:39:e7:2c:af:7f:1a:24:78:7c:87:97:68:29:b6:
e8:3e:fa:6b:8b:85:b2:fa:89:5c:d4:f9:f3:1c:99:
2e:e7:4b:b3:fe:70:44:ab:98:53:24:e6:2c:dc:40:
d7:b3:df:85:2e:b3:5d:7f:34:7c:f6:83:39:40:32:
ac:c1:55:90:90:e9:89:0c:72:07:1f:ef:2d:75:d4:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:55:7D:D4:B9:14:53:A2:79:FF:44:55:8B:08:3D:76:6A:37:54
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cf:65:bd:4e:99:36:0b:df:b5:5e:89:34:36:7d:8c:c5:39:
00:1a:20:2b:6c:1a:d0:66:10:8d:5f:4b:ea:fc:bc:52:dc:6e:
bb:72:98:49:20:39:89:ec:bb:ad:2d:4b:f4:71:a0:48:d3:c6:
6b:bf:77:1e:ba:40:60:72:cb:d9:b0:49:4b:06:30:52:0b:83:
d5:7e:c2:12:10:ef:b4:1f:0d:98:8e:ab:7b:73:ac:16:fa:e3:
0b:e3:7c:3e:22:12:25:52:6f:7b:bf:97:f0:30:88:11:ec:ff:
e8:70:07:fd:ae:32:09:0b:73:e4:f0:70:44:51:a8:2d:4a:67:
c8:d3:cf:e6:3a:cc:1d:60:59:4e:4f:53:22:bd:8f:ca:a1:d5:
e3:86:8e:6e:1f:ae:6e:82:65:dd:51:bc:6d:28:0c:17:ca:a9:
51:97:70:ae:1c:66:20:59:05:9b:41:26:56:de:84:d2:af:9d:
d7:aa:ff:02:46:0e:2a:12:f4:4a:f9:c8:35:be:79:12:50:68:
fd:07:c0:92:f9:e4:b8:c7:c0:32:33:1f:f8:d1:21:bf:3e:3e:
e9:d7:a2:c3:2c:e0:23:4a:7a:e6:41:ec:39:85:66:52:e6:08:
72:70:1f:21:53:17:cc:84:ff:2e:ee:f8:df:11:bf:0a:db:e5:
09:bf:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:05 2026 by rpki-client