Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: cRn9NC3I6nmTLcnA1UaA5+DInodJLDahOa2++tT6tN0=
Subject key identifier: C6:1D:43:6E:92:9E:67:EE:A6:D9:03:6A:5D:CC:F1:27:17:29:48:AA
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019CAD227086A01241AD013427715A75D194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0AB9
Signing time: Mon 02 Mar 2026 06:00:41 +0000
Manifest this update: Mon 02 Mar 2026 06:00:41 +0000
Manifest next update: Tue 03 Mar 2026 06:00:41 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: CleRJe5lXZVl+GgM3joQwsNOLhm0l9XPMmrCe7oe2jA=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:70:86:a0:12:41:ad:01:34:27:71:5a:75:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Mar 2 06:00:41 2026 GMT
Not After : Mar 3 06:00:41 2026 GMT
Subject: CN=c61d436e929e67eea6d9036a5dccf127172948aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0f:6c:59:61:f0:cb:7f:d2:e7:14:33:59:19:
5b:04:91:24:96:57:ef:9c:33:fb:49:53:3d:a3:b0:
94:7c:df:93:7b:b9:e8:0c:85:78:af:b9:0f:14:d9:
c3:2e:01:a2:19:49:ac:3a:0c:b1:ed:b7:01:7b:85:
28:17:20:ca:10:4f:41:f8:12:38:8b:90:92:21:f0:
f4:c4:e2:02:fa:c3:96:7d:9a:22:e5:5a:04:d6:c2:
94:bd:ad:fb:dc:af:84:ff:56:f4:c2:6d:f7:4e:0a:
d2:14:0f:e3:ec:30:d0:af:e0:49:f1:87:49:24:9c:
0d:31:4c:25:ca:2c:3b:38:7f:52:7c:60:f5:53:56:
dd:23:6c:06:3a:d9:ed:ff:87:2f:4a:30:c7:80:e0:
e3:1c:91:2f:35:d2:c0:0c:0c:49:68:c9:ff:f2:4d:
2e:3d:1b:b1:d7:9b:b6:35:03:60:c7:2a:62:61:b8:
e4:aa:a2:36:17:fc:a4:44:e0:2a:37:e4:e0:3f:1d:
a3:66:f8:0e:fc:f0:0e:a2:97:eb:b6:31:55:2f:34:
cc:3e:97:91:b4:b3:36:f2:9f:94:58:0d:3e:44:49:
ce:f4:19:06:bd:b7:29:64:12:9a:95:35:80:73:6c:
13:0e:dd:1c:1b:b2:26:b0:8f:29:97:51:19:10:b9:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:43:6E:92:9E:67:EE:A6:D9:03:6A:5D:CC:F1:27:17:29:48:AA
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:ab:d4:99:d2:13:d2:46:b1:6c:26:3a:9d:1f:19:9c:14:
fb:c3:d6:85:56:6f:32:0e:52:5f:8f:c1:2b:fe:a9:0c:74:92:
64:89:62:eb:df:33:70:69:0d:70:15:0f:8e:69:61:97:7f:2e:
65:0c:79:df:8d:c5:4e:cc:1e:89:ff:f5:b6:7f:1d:14:b2:b2:
f0:15:bc:00:32:d5:92:3b:0d:bf:f5:74:98:72:f5:00:3d:a4:
1d:1c:04:1a:1b:45:19:43:a2:63:fc:9f:af:ab:8b:77:dc:df:
0e:0b:67:61:da:ac:72:9b:3b:87:65:d9:7b:f2:df:15:60:c7:
33:68:2f:00:cf:35:25:39:79:2c:15:23:f6:ae:21:2c:38:14:
5d:88:67:5c:85:0b:e8:b9:96:13:68:43:37:a1:bb:6a:92:ea:
fe:18:05:14:0a:b1:2a:62:70:ed:f4:12:27:48:a5:48:64:25:
af:f8:b9:21:91:5f:d2:86:3f:6a:8e:09:87:66:8a:5f:68:4b:
48:69:fd:50:b1:da:37:65:b5:3d:07:62:7e:63:80:8b:3d:06:
15:32:ba:a0:96:2d:8c:48:c4:35:c1:61:f4:f0:1a:70:3c:15:
a3:5b:46:94:21:18:12:42:cc:9c:31:f0:ef:15:8d:9b:f8:79:
e1:52:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:52 2026 by rpki-client