Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: JY6pVA97DVbP8BuBovoOqSjIAq78yRu8yQUNBhBIZtk=
Subject key identifier: A1:71:CA:83:98:F7:89:4E:9E:5C:69:A6:17:12:0E:81:2D:37:46:39
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 019CACB47714517A1D2C254BE14277B6C695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0F56
Signing time: Mon 02 Mar 2026 04:00:33 +0000
Manifest this update: Mon 02 Mar 2026 04:00:33 +0000
Manifest next update: Tue 03 Mar 2026 04:00:33 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: GyS2jwbL6R7uDmnP+di5Nz2Z8Vt6GScbmCANCXPB1ic=)
2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:77:14:51:7a:1d:2c:25:4b:e1:42:77:b6:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Mar 2 04:00:33 2026 GMT
Not After : Mar 3 04:00:33 2026 GMT
Subject: CN=a171ca8398f7894e9e5c69a617120e812d374639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:8c:04:2f:5b:e1:9d:b0:71:20:08:aa:3a:
0d:01:9e:06:8a:79:48:b5:9f:83:28:45:77:58:6a:
95:86:50:b4:29:1c:40:11:83:61:1a:99:37:65:a1:
68:cb:72:57:e3:7b:e7:87:35:e1:d2:80:a8:00:f8:
13:cf:fb:37:1b:c1:b9:3b:85:42:ab:03:83:54:64:
8a:5b:17:08:a4:a1:16:1e:b7:04:7e:28:2d:ed:2e:
f3:1e:c0:b0:68:75:47:95:c3:ce:96:7b:04:e4:92:
95:0e:41:31:09:91:1d:72:73:69:27:56:0e:81:c6:
d5:f7:1e:cc:42:07:97:bb:09:be:ce:d8:e5:15:f6:
f2:bc:01:7d:c3:ab:6a:3b:28:2f:1d:d6:98:99:97:
36:ad:88:1b:99:9f:e4:d4:33:e6:41:63:ae:4a:fb:
e9:44:08:a2:3c:e7:26:78:a5:83:b4:34:40:7a:3f:
31:bd:7b:07:f6:25:34:43:57:84:f6:8c:79:50:09:
73:47:63:ba:d5:c2:c0:ae:80:bd:64:58:37:b3:d2:
a2:9f:07:4c:7d:df:a4:3a:d0:71:47:87:43:03:2d:
5e:ea:ba:88:d3:07:ca:07:89:52:18:eb:89:6d:da:
59:08:5a:da:bc:a5:e4:7f:c0:d7:9a:1b:5e:a6:38:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:CA:83:98:F7:89:4E:9E:5C:69:A6:17:12:0E:81:2D:37:46:39
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:83:4e:5d:b2:d5:30:f9:a8:39:2e:7b:ce:a2:aa:45:71:
0a:4d:e2:0a:76:81:8c:43:59:58:83:d1:a0:11:f8:90:d1:3b:
77:80:b8:3d:a5:9b:5c:97:20:c6:e1:d3:9b:a4:dc:c9:55:32:
ff:50:23:9d:fe:f3:a3:b2:bf:62:5b:f1:9a:a7:c5:3b:82:53:
72:b0:4f:17:1f:f3:52:c5:81:a3:10:d9:39:13:9c:bd:82:ee:
2e:dc:37:d6:af:f8:79:5c:db:1a:68:bc:50:2d:85:e8:fc:30:
51:19:c6:2d:84:cf:4c:26:1f:4e:b7:66:cc:a5:7b:03:ec:2b:
0b:4f:1c:98:c2:1d:8c:b7:03:22:60:21:2b:93:8a:fe:43:04:
fb:11:7d:35:86:a5:42:5e:da:54:11:50:a8:18:28:e3:4a:22:
3a:35:b7:99:49:8e:cb:a3:7c:38:f7:6d:c2:9e:e4:e1:9f:15:
04:0b:98:f3:c2:28:81:60:38:db:cb:be:ff:56:75:53:de:f1:
9e:a6:b2:80:32:78:ee:7d:2e:06:b1:04:24:97:d2:ea:a2:f0:
07:a0:4c:19:da:26:18:a5:0f:4a:62:36:b4:71:fe:f7:f4:9c:
04:65:c5:f5:17:6a:ea:04:60:0f:9e:1c:4c:52:7a:f3:61:b3:
99:f3:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:06 2026 by rpki-client