Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: U2e9CzS0GRvQ48nXUHdqkQ224GJNvku8c7fF1WFw+IQ=
Subject key identifier: 79:3D:DC:23:03:C6:10:67:A5:E1:FF:B5:A5:C7:AE:9D:2D:8B:93:62
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019CB1370057FDF840D6F90FB3D9D6329A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1853
Signing time: Tue 03 Mar 2026 01:01:37 +0000
Manifest this update: Tue 03 Mar 2026 01:01:37 +0000
Manifest next update: Wed 04 Mar 2026 01:01:37 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: QIqP1q8M0TLlSNk9DnOw/Ntx7z3kjr6cvPdIzRrp1KA=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:37:00:57:fd:f8:40:d6:f9:0f:b3:d9:d6:32:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Mar 3 01:01:37 2026 GMT
Not After : Mar 4 01:01:37 2026 GMT
Subject: CN=793ddc2303c61067a5e1ffb5a5c7ae9d2d8b9362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:31:6c:0a:8d:98:51:c3:af:1d:bf:f4:1b:
42:1f:5e:8d:ab:44:56:c9:36:0b:86:bd:f0:7f:ca:
9b:d8:6e:7f:07:ff:26:aa:86:83:3d:3a:5a:c4:14:
4c:27:ce:9c:c4:94:52:89:94:8f:60:e4:2d:89:77:
77:dd:e3:5e:ad:48:0e:5c:2f:96:6b:b6:26:ec:b8:
89:3c:22:3d:7d:89:08:ce:f8:4e:10:0f:2b:58:bd:
03:7d:f1:47:4f:1e:f8:c9:57:39:d0:a7:de:1f:49:
9e:4f:8f:cd:7f:4e:4e:17:84:83:57:36:1c:94:af:
d8:97:df:3a:dd:5c:c9:4b:1d:3c:67:27:dc:7f:0f:
30:4f:ab:50:75:05:6d:82:ac:30:5e:6c:94:f4:d0:
5b:6d:b8:b0:91:13:2d:87:f7:4d:e6:05:20:9d:99:
05:e9:8a:1c:09:bc:9f:74:fa:ae:de:4f:06:a9:29:
3e:bc:28:8b:05:d6:f9:0e:31:20:7a:6f:55:78:1c:
85:7d:34:9b:c8:9f:b0:85:6d:88:fd:f6:9b:a4:91:
04:f8:47:c1:50:f6:3e:13:cf:3c:6f:bb:fe:95:d3:
97:37:6c:07:f1:8f:3b:cb:12:4e:d1:3f:e4:8f:37:
1b:46:e1:17:78:94:bf:ee:af:63:fe:5f:76:47:8a:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:DC:23:03:C6:10:67:A5:E1:FF:B5:A5:C7:AE:9D:2D:8B:93:62
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:ff:26:92:9d:ed:0f:d5:1e:b5:7c:c4:31:69:96:51:6a:
e9:c3:b5:14:e6:91:d7:62:06:42:11:3c:04:db:13:35:90:2d:
a4:e3:58:0f:e4:d4:92:13:3b:a3:3b:01:5a:dd:7a:71:a5:b5:
a7:c0:3e:1c:4e:e8:6e:08:05:84:c5:2c:1b:d8:1e:89:47:60:
8f:43:0d:bb:df:f6:c7:37:ac:78:71:37:9b:b9:ea:db:71:46:
27:cd:b6:8d:d7:d8:aa:22:2a:ed:a7:5d:51:6e:69:91:11:23:
17:71:7f:75:24:9b:92:21:9f:61:17:10:37:f5:32:ea:cc:d6:
ad:b9:50:2c:dc:9e:bf:d7:88:81:c3:90:30:60:8a:52:61:bb:
fe:26:be:43:0b:08:4a:52:09:56:79:05:10:ed:32:2d:1b:4b:
c6:b7:b2:22:75:a3:26:fd:00:1e:1e:3c:fc:e0:bd:66:b0:95:
e7:31:c6:d5:3f:63:a5:42:f3:38:e8:9b:19:9f:32:75:94:ce:
ea:e8:1c:0f:2a:ba:9f:73:c9:4e:84:92:36:cc:26:18:df:81:
66:18:cb:19:8e:51:d4:45:e2:70:04:6f:ad:76:e5:13:2c:a3:
f1:7e:24:83:7e:ef:08:43:ec:8e:b9:4b:4f:0a:71:d5:6c:13:
45:b5:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:07:24 2026 by rpki-client