Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: RZVpAMcp0MPEfjJA6CgOwMSohR/lhJ/1oorWgedawUg=
Subject key identifier: 21:43:5F:E1:2B:AB:07:6C:B6:4B:37:7E:DF:CB:ED:28:F5:CD:AE:48
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019CAB3430F928BEFED8A483022954677BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: diYpnS6w1epUUwsZnBsJvIhfnGGRhDzecNlMiTc90l4=)
2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=)
3: FHmWYGqSdJ5-CsqGnoJKGcWPx4o.roa (hash: S6HSVK6CcsFHebtvgQR42wkTCiX4LDp+Y8NKZpU+vms=)
4: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=)
5: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=)
6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
7: xTqndtOYNNxGOKliN2NcyMFkix8.roa (hash: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:30:f9:28:be:fe:d8:a4:83:02:29:54:67:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=21435fe12bab076cb64b377edfcbed28f5cdae48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:ea:14:44:e1:46:0c:e0:45:b2:e0:02:d9:
6a:de:f5:c0:0d:75:cc:58:70:b1:76:9a:d1:88:31:
03:b7:f5:0b:29:bb:56:dc:60:dc:2a:27:f3:b3:6e:
70:c1:fd:c0:be:b4:39:ed:cd:7d:7f:b4:37:95:b4:
7c:8b:0b:78:87:92:41:65:4c:a4:35:2c:43:c1:0e:
58:9c:5d:56:8d:31:e0:ef:f1:c8:19:c7:bd:9d:cb:
c4:05:51:f7:bf:08:c5:15:2f:e0:54:11:d4:14:95:
58:df:eb:22:1a:ec:1e:e8:31:fd:d2:d7:cf:a4:4f:
bf:94:1d:98:1b:92:2a:df:35:b6:26:f9:c2:f4:ce:
06:1d:a4:91:43:56:a0:e6:ac:88:87:f7:ac:2e:df:
41:52:a4:fa:0c:14:30:ff:49:4a:01:80:cf:d7:8a:
5d:45:6c:a4:a2:fe:ea:3a:f3:1c:ec:f7:85:59:e1:
cf:be:4f:dd:05:18:37:18:5c:53:27:c5:38:d1:f3:
1c:45:2b:90:55:ea:b5:8e:12:b7:6f:b6:b2:55:6d:
ee:09:71:71:f1:17:40:17:40:74:1d:fa:ec:5b:85:
a0:0a:f6:a3:24:67:54:9a:8d:12:76:f5:d9:03:96:
83:47:98:0d:b8:2e:3c:78:5b:70:24:e4:d8:de:46:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:5F:E1:2B:AB:07:6C:B6:4B:37:7E:DF:CB:ED:28:F5:CD:AE:48
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:f7:d7:63:99:6d:70:af:63:e0:1e:b3:59:51:08:d8:49:
f8:ea:02:3c:e3:32:7b:ce:cb:94:ae:c7:84:5f:9d:fa:3e:d6:
00:d0:07:ff:58:c6:c2:6c:53:2d:d7:bf:30:52:6d:6c:4a:6a:
12:39:bf:1d:27:68:ce:90:32:6c:43:90:aa:01:31:70:e2:9a:
b5:27:3f:df:60:b5:db:4d:87:2e:1d:79:24:85:b9:60:d1:fe:
2c:a5:6a:f3:42:e3:b9:fa:e8:d3:a1:45:87:b3:99:ab:0d:7d:
65:00:87:3b:5d:ff:16:35:78:2e:4a:9d:7f:b2:8a:ea:39:8e:
08:62:d3:00:e8:e9:2a:a5:68:df:9f:dd:ce:3d:61:80:6b:7b:
07:b1:28:35:08:0c:7b:4c:b8:8b:26:91:ee:ea:da:28:82:c5:
9e:42:1f:24:18:d5:aa:8e:8b:4b:dd:ed:2e:0d:02:1f:82:87:
24:ad:bf:b2:7d:81:f3:8f:28:d5:4e:af:42:bd:f9:20:a3:63:
9e:f6:b0:63:15:bb:8d:8b:25:99:24:af:b8:a1:6b:18:34:cf:
6a:9f:9c:15:1a:a5:26:71:02:5b:ae:55:95:72:41:4c:c6:d3:
93:46:08:68:76:d0:ba:36:9e:b6:44:85:b1:3f:7d:d2:f0:3d:
03:5b:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:39 2026 by rpki-client