Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: PJO4erSqFB7tegk+WuzDoqCQG9TN8/T9M56wwpf/rH4=
Subject key identifier: 33:67:CD:E4:CC:44:7A:10:A5:AF:77:15:5D:E1:65:96:E7:72:3D:A7
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019CAC46EDAD7B7D38EE93DBC91DC07F24AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0E47
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: rI2+azBDpTAzuL9OTTNfwfKSplDU3LgTetEg2hKvwJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ed:ad:7b:7d:38:ee:93:db:c9:1d:c0:7f:24:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=3367cde4cc447a10a5af77155de16596e7723da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:3d:3f:ab:e7:ae:06:de:1b:14:ff:54:9c:
d1:36:f6:b7:f7:1a:d9:6e:40:03:38:b4:fa:6d:cf:
1b:11:b5:55:fd:a7:7e:08:9a:f7:bb:ae:cf:aa:e7:
0c:cf:38:ac:8d:c5:7a:87:8b:6b:4c:04:d5:a6:b1:
af:4d:e4:87:8f:98:0f:da:d6:11:40:82:a2:ac:0e:
57:c6:2c:57:df:df:a3:6e:ad:d2:54:b1:c0:3b:29:
bb:37:b7:b9:f3:44:40:65:3b:b0:f3:6a:7b:8f:b4:
68:9a:2f:f2:25:e2:43:9a:55:a5:78:e3:8b:f3:a8:
7d:77:67:00:ae:49:0b:1e:57:7b:18:5d:d9:50:8f:
f1:58:de:4d:cf:c2:ac:70:e1:49:03:55:20:0e:56:
78:55:80:6b:65:d2:9b:25:2d:57:2f:b9:90:14:a4:
85:7c:d8:29:df:9b:da:fe:a7:f1:a2:db:21:5c:b1:
39:04:e1:88:cc:9a:cd:a8:85:81:e0:fe:d9:09:ce:
76:7d:96:a9:60:9c:15:58:87:b1:a7:d0:ab:d3:bf:
19:e9:85:cb:b9:f3:3e:2e:26:94:51:2a:58:b2:76:
be:f5:a6:96:b9:2d:e3:12:69:e4:b8:ce:d0:74:da:
e7:72:18:7b:0d:47:83:81:26:e9:24:50:61:2b:e6:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:CD:E4:CC:44:7A:10:A5:AF:77:15:5D:E1:65:96:E7:72:3D:A7
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:4a:62:57:cc:71:09:ea:d7:37:08:cf:c4:e7:86:7a:75:
d3:da:ff:ff:a3:74:e3:82:54:af:47:b7:be:bf:ba:81:8d:fb:
d8:0e:03:53:dd:cf:48:b9:ae:b4:3a:ba:03:06:3d:ae:bd:31:
90:20:fd:50:87:fc:97:4c:6c:31:69:f2:14:19:1b:87:79:d6:
1f:e0:49:75:6f:d1:12:fa:75:4a:07:f4:39:64:f5:8a:45:12:
e5:85:5c:36:32:6c:f7:2b:f7:14:d2:b5:de:6b:15:9e:78:65:
d5:43:54:d3:1e:a6:98:4c:ca:28:ee:e5:7d:67:86:49:5d:3c:
2e:15:ff:7e:f9:d1:03:2d:85:b4:82:ce:af:c1:a3:81:22:7f:
48:aa:1f:f1:db:27:61:4f:50:0e:41:7e:ff:0c:d2:d6:a5:33:
04:06:34:f1:fe:ed:d6:2b:aa:be:a8:ff:11:fa:38:e5:f5:ce:
60:f6:2c:1d:06:a7:50:88:dc:c2:5a:f6:45:26:b6:8b:c6:25:
ea:c8:9f:11:c6:00:0c:e9:9f:39:3d:76:a5:23:c1:00:fc:ef:
3a:73:fc:d6:90:1d:ec:75:01:dc:cf:df:e2:40:bf:e3:0f:d6:
d8:a1:96:7f:7d:e3:49:ed:87:be:d4:7c:2a:66:55:41:6c:51:
ef:78:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:47 2026 by rpki-client