Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: I4qkyaXTWTs7TmV7vY9QxvnjljbLklB2ebkMQpowKRM=
Subject key identifier: 94:5C:AE:7D:9A:C4:29:21:70:7F:4D:BD:78:C8:FC:7D:9B:81:6B:3E
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019CAB6B0F46843B8A57411A4714FD06D33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 22:00:45 +0000
Manifest this update: Sun 01 Mar 2026 22:00:45 +0000
Manifest next update: Mon 02 Mar 2026 22:00:45 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 6bdVYOITOKQGOEBiPwmSkcFIk2Tj0NMblnfsP8O9tOE=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0f:46:84:3b:8a:57:41:1a:47:14:fd:06:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Mar 1 22:00:45 2026 GMT
Not After : Mar 2 22:00:45 2026 GMT
Subject: CN=945cae7d9ac42921707f4dbd78c8fc7d9b816b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:56:2b:ec:a4:97:f9:0d:f9:13:34:54:14:
8e:e0:e8:62:38:20:3b:9f:41:e1:2d:5c:68:af:05:
2c:10:38:f2:1d:b2:83:1a:cb:a4:b1:81:51:db:07:
64:65:82:e4:f2:40:16:b6:25:03:e1:8a:2d:4f:a5:
a2:68:a3:c9:31:ee:ea:b4:17:cb:b8:6b:c2:f2:3d:
e5:1a:ac:b2:6e:1c:d3:ec:6c:bb:04:fe:81:9a:e1:
c9:a9:75:74:78:5d:81:0b:64:f9:33:80:9f:f5:de:
56:9f:e3:bd:49:88:ad:f2:c2:71:d0:82:94:ce:50:
7f:ba:8f:f2:27:91:33:cd:c1:c1:59:d4:9b:c0:2a:
b3:36:dc:2d:3a:64:d0:a3:bc:34:8c:6f:a0:13:bf:
0a:70:e0:1f:bf:44:28:bf:d0:e2:31:35:88:ae:66:
ce:11:f7:1a:d3:ac:44:6d:1c:f2:3f:e4:36:e5:b0:
81:d3:14:e1:be:dc:97:b9:51:b9:27:35:c1:0e:02:
51:c2:cc:6e:91:b6:8d:82:68:22:91:d5:8b:a9:9a:
a7:41:41:02:d9:03:0c:fa:0c:bf:ca:81:aa:00:9b:
07:a6:ec:3c:fa:8f:5c:6d:55:e1:e0:b1:74:7f:f5:
00:e3:98:76:91:0a:d9:0c:a9:56:9a:0e:d7:f7:f3:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:AE:7D:9A:C4:29:21:70:7F:4D:BD:78:C8:FC:7D:9B:81:6B:3E
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:40:a8:41:d9:06:4b:f9:35:1a:4b:23:12:b1:33:4e:30:3d:
c4:3b:2c:70:6d:4b:db:e0:78:b8:9e:9c:28:37:dc:81:e5:52:
04:ed:ef:be:5f:6e:da:ca:de:ef:35:b1:a2:60:21:b4:4e:d5:
70:56:e9:cb:84:72:f5:48:08:41:aa:ff:9a:c0:84:ec:3d:2d:
b1:ad:26:29:d8:d0:fa:f3:82:a5:5d:ec:8c:91:4d:72:ae:a1:
9c:85:be:8a:a1:57:ec:d7:d3:06:62:95:06:4c:37:ed:df:3b:
9d:eb:4a:7f:ad:ba:54:40:5b:f6:83:89:33:51:47:b4:f1:fd:
21:eb:4a:b0:ab:e6:ac:eb:6c:0a:94:0b:51:86:71:bd:20:ce:
69:45:2c:02:e8:4f:96:42:f7:c3:db:cc:9a:7f:03:69:e5:04:
da:d5:59:a0:09:12:c2:20:40:c8:79:e5:84:62:ae:9a:f4:ac:
71:e6:d2:e6:09:0a:bb:fc:58:56:9b:05:a1:9f:4e:09:1a:c6:
49:3c:5d:f4:e1:ea:9d:e1:52:5a:53:6f:7d:51:ce:4d:55:c5:
b7:2e:64:f9:26:33:ee:6d:a6:dc:6f:2c:6f:cd:9d:b6:6d:df:
90:ea:0d:c9:9e:cd:6f:1c:ce:0a:95:32:b0:e2:6f:c1:b0:d8:
20:da:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:52 2026 by rpki-client