Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: gcpYeWfGAfcivqLYv5y1j07syTWRuyQ1kL0VeRx62eo=
Subject key identifier: F9:9D:FB:D7:A2:9F:6B:97:89:E5:A5:E6:B6:92:CF:F2:E2:ED:EC:CE
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019CAB3431B2FE20A9818F35EB569EDDC448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: bMPDkgBYrZjne+0vPuSKJcEfxjk87yJ3tAvgRTd6n04=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:31:b2:fe:20:a9:81:8f:35:eb:56:9e:dd:c4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=f99dfbd7a29f6b9789e5a5e6b692cff2e2edecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:5a:86:df:c9:68:be:41:e9:39:a5:61:e3:
f2:28:84:1d:1c:ba:b1:e8:0f:7e:10:00:3a:88:48:
43:d1:8d:e4:b5:0e:d3:3d:83:85:4e:d6:6f:ba:b6:
24:4f:a0:d0:05:e1:65:25:21:e3:ae:05:27:f5:57:
b8:54:9f:be:a1:2a:c7:c5:72:72:8e:43:dd:b8:c5:
8e:1f:41:bc:f6:13:9c:87:80:95:45:5b:9c:c5:7d:
a2:56:09:d9:00:d7:c6:08:3a:f3:74:b9:b5:44:86:
eb:c2:4f:86:86:29:75:bf:39:90:6f:65:c2:d6:2c:
28:50:1c:a8:ec:24:3a:d4:97:da:e2:e8:ea:69:6e:
3b:fe:21:8d:f0:03:5e:3b:88:d9:04:ff:a4:ce:df:
8e:c3:f0:6d:42:20:b5:de:7e:f2:3d:05:e3:aa:bd:
79:6c:bc:ef:22:e8:f8:ec:d1:ed:66:ae:03:ce:18:
1b:b0:8f:64:11:bb:18:0b:4c:d5:fc:1b:5a:f5:c1:
87:d2:0a:c1:78:93:0c:69:eb:5e:f1:22:1f:63:89:
74:eb:bd:1d:77:00:0a:8f:11:50:75:fa:3b:4e:24:
84:7f:36:da:f5:a4:20:ac:f0:86:79:3a:8a:70:a6:
7c:a2:93:c6:00:19:73:23:41:f0:8d:5b:cb:3f:f5:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:FB:D7:A2:9F:6B:97:89:E5:A5:E6:B6:92:CF:F2:E2:ED:EC:CE
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:2c:ab:e0:de:6e:9d:a4:44:7a:e8:1b:b8:33:92:9e:43:
e1:50:f1:56:0a:0d:dc:11:a5:b2:d9:f7:6e:26:aa:48:8f:65:
0a:e3:ec:12:84:81:d0:da:fc:2a:0d:82:af:9b:3f:7b:52:1f:
c6:6a:a5:cb:5d:23:b7:f1:4e:d5:04:7d:c4:6c:3c:ae:d0:94:
e1:c8:73:e1:18:0f:b9:8d:b2:56:c6:70:fa:c1:92:5c:d9:a0:
06:39:5d:a6:3e:8b:76:58:77:87:33:22:cb:5e:c8:51:03:09:
ac:a3:3e:01:58:33:0f:29:03:b5:32:3d:3e:a2:ce:83:1b:ed:
62:fd:c9:40:b0:f8:4a:9c:69:fa:52:dc:25:8f:86:80:27:59:
cf:b3:6a:28:6f:20:ea:ac:6d:95:b4:fb:17:eb:77:32:fc:eb:
26:58:37:7d:14:a2:27:0f:d0:14:eb:c1:d2:c8:db:0d:27:1b:
3e:28:28:ec:b7:2f:76:49:ce:d1:53:35:03:70:b0:b8:77:6c:
1f:27:b5:77:92:11:f3:e4:11:a9:7c:41:e7:7e:59:91:9f:42:
16:eb:aa:d9:7e:db:24:ac:76:78:d1:57:c1:c4:2d:fe:98:2d:
6d:d0:cf:8a:a6:29:dc:33:2c:90:da:2d:07:9f:ec:0b:18:30:
72:26:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:02 2026 by rpki-client