Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: IUg3z4s5RmRM2QTDnievm3KxqzphIn9d7d+IAS2qcIg=
Subject key identifier: B6:AD:F6:03:5C:AA:F9:70:D2:64:E5:1C:11:3A:5F:06:8C:66:1F:FB
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 019CABD987C08C6567F1818620CBF30D26CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0FA7
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: Vo7+cepFigNn7xPTsn50FB9buhhJg0ibpbdspk1LNug=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:87:c0:8c:65:67:f1:81:86:20:cb:f3:0d:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=b6adf6035caaf970d264e51c113a5f068c661ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:51:27:81:14:c5:46:82:3a:39:cd:51:a7:
a0:4a:30:b5:4a:32:23:c2:94:92:72:24:0e:ad:bf:
14:a5:b1:b1:de:c0:6c:69:45:e0:6c:ff:c6:ec:86:
36:cc:52:90:11:31:aa:81:21:71:ba:84:e1:7b:8d:
94:90:5a:9e:4d:c5:80:9d:48:1a:da:5a:e7:05:a0:
62:65:b6:a6:b8:4d:e5:6e:11:46:18:7e:1e:ce:ba:
88:5f:c7:cc:96:1c:6a:f0:df:03:a3:14:86:7c:62:
85:b6:48:38:58:1e:d8:8c:00:ac:6e:b0:a9:26:f0:
60:36:1f:80:45:d0:e5:7b:8d:96:21:c8:00:76:07:
46:ba:c2:cf:61:25:f8:29:3b:60:0b:e3:42:03:1b:
e3:73:83:2a:70:e8:6a:21:eb:a2:cd:85:80:2e:c5:
6f:0b:18:a1:1c:64:dc:98:e3:e9:14:a5:f4:78:74:
9e:11:44:87:98:91:6e:d5:9c:59:18:7b:ac:e3:df:
9d:f3:21:7a:e2:de:b1:6b:57:d4:31:b1:b9:35:2a:
d5:aa:ac:8d:e9:14:e0:d1:36:9b:6a:7a:6e:1a:2e:
72:f3:c3:7b:26:c8:c0:d4:b0:32:5b:d3:af:fe:ad:
a8:16:c0:41:4c:fc:b4:83:af:78:cf:1e:e8:2c:0f:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:F6:03:5C:AA:F9:70:D2:64:E5:1C:11:3A:5F:06:8C:66:1F:FB
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8b:9a:4e:28:18:15:34:c8:d8:0a:fa:3e:76:19:cf:20:6d:
b0:09:31:51:e2:c8:15:15:62:e6:05:f5:ab:e9:17:22:25:61:
e8:ae:67:b2:53:9d:11:68:c4:55:9a:d2:ca:c8:90:19:40:f5:
97:12:1e:d2:2b:c7:0f:c2:78:0b:c4:04:15:44:ce:c7:ec:f6:
28:db:53:9c:45:5a:bf:d0:55:e9:04:85:93:f1:b8:c5:d4:cb:
e9:4a:1d:5f:e4:d6:62:97:b5:13:99:cc:d6:fb:57:31:71:51:
eb:c2:6f:d0:08:d2:57:47:e1:60:cd:09:31:bd:e4:22:38:57:
77:5c:4f:44:72:25:b4:48:11:d6:b8:06:ae:9d:89:20:19:14:
99:13:3f:ab:90:ba:12:f9:49:b0:8f:27:a1:7d:d6:30:50:ab:
58:90:82:d4:39:a6:0d:98:e8:d6:8b:47:72:71:02:4f:c6:3f:
8a:3a:1a:cc:ed:66:e6:63:b2:40:29:85:13:f9:d6:e2:ac:91:
26:6d:51:95:d1:d8:32:7c:b6:c2:74:67:42:fa:c2:2f:66:be:
f4:c5:31:0d:27:31:4e:cd:af:20:d8:d7:82:ab:fc:6c:f5:a7:
7b:73:8a:43:8d:95:62:07:e8:86:65:be:79:7a:7d:dc:f7:45:
ed:5c:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:31 2026 by rpki-client