Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: tn1pL7ocUauLkePdh2T/vPKWOP4a1o09s8P6jn+XlXE=
Subject key identifier: 3F:88:60:36:3D:10:9B:B0:A7:8E:45:42:1C:9A:6C:CE:42:A4:D9:13
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019CAB341D83761D4020529F8971200E9B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:45 +0000
Manifest this update: Sun 01 Mar 2026 21:00:45 +0000
Manifest next update: Mon 02 Mar 2026 21:00:45 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: /0byDvx0WAJpjtQpbSqZGMQxEUdr7Vo0APEx1s28Qe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1d:83:76:1d:40:20:52:9f:89:71:20:0e:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Mar 1 21:00:45 2026 GMT
Not After : Mar 2 21:00:45 2026 GMT
Subject: CN=3f8860363d109bb0a78e45421c9a6cce42a4d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:b9:52:ed:f6:56:d5:d3:74:fd:11:78:21:
c7:66:cd:06:a8:3b:20:3f:35:d5:ad:91:e7:94:92:
d9:85:8d:e5:88:70:34:66:47:69:a6:ff:ec:4b:39:
d4:2c:72:e1:8d:39:6f:64:01:c3:a3:9c:94:37:cc:
8a:83:a4:28:de:69:60:35:e8:ed:93:3f:87:39:f0:
45:ce:d7:8b:ea:32:27:96:57:e0:b0:d8:d6:a1:8b:
d2:07:f1:30:b2:be:d9:f9:e2:02:68:e6:cf:4e:83:
d9:63:ae:0c:9b:68:a7:40:68:d0:54:d4:e8:70:c8:
b8:d6:d2:eb:4a:a1:56:f3:33:a6:95:f0:c5:d8:9c:
32:3e:01:ad:c7:0e:22:2a:ab:28:14:f5:73:3e:43:
a8:05:8a:bd:53:d6:c5:89:c1:83:d5:73:cb:fd:86:
3e:8e:e2:84:b5:4e:a8:a0:8e:5f:f2:0d:27:eb:bc:
1c:f6:3a:c6:c4:4a:3f:99:03:19:d6:c5:76:cc:e3:
a7:24:96:dc:a7:b8:92:5d:e1:cb:aa:b9:30:e4:3b:
1d:06:dc:99:c3:bf:4f:92:8f:ab:39:da:a7:2a:0a:
58:4d:de:63:79:6c:db:74:b0:42:6d:6b:5c:9e:fa:
2b:85:e8:cd:ab:36:91:1b:ca:8a:b2:ba:4a:8d:0e:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:60:36:3D:10:9B:B0:A7:8E:45:42:1C:9A:6C:CE:42:A4:D9:13
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:73:38:4c:f6:56:e9:3f:7a:63:db:83:e4:69:32:c1:b8:50:
de:6a:de:4c:fe:d4:cc:50:81:0d:b7:74:a5:db:da:3a:7e:41:
fa:77:2f:f5:2e:75:b4:13:16:05:43:4f:7d:66:4a:0a:4d:9a:
2c:fe:d4:ad:74:07:73:c8:0d:74:c5:fa:5e:92:05:66:74:1f:
7a:07:aa:9b:fe:9d:df:73:52:7d:20:c7:27:fa:33:41:4b:af:
cd:85:01:e3:4f:cd:df:fc:71:1b:10:e2:82:a5:4a:1c:a0:93:
04:c0:cd:e3:f9:ec:d5:50:b5:94:e5:94:46:81:7b:e9:7a:52:
26:44:7c:e2:01:1b:dd:65:c9:40:1a:2b:f2:b5:23:28:27:0d:
2d:3e:3f:ea:ca:90:df:49:e1:af:ad:4a:f0:c2:21:1c:d6:ce:
a1:97:41:36:40:fa:0e:8d:03:7d:d2:ed:59:bc:87:82:38:b8:
fd:05:54:13:fe:56:db:30:cf:34:85:95:1c:0d:f8:af:57:fa:
89:91:81:43:86:f6:8f:10:cd:59:13:4a:fc:f7:02:d6:47:17:
82:da:d0:f5:63:c6:9c:09:43:aa:25:cd:f8:98:b2:45:52:34:
69:fd:47:e2:17:1b:0f:5c:e2:5f:54:e7:6b:29:f8:25:c3:97:
16:d6:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:24 2026 by rpki-client