Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: vQNXUhYXJt2taJzfol7AZKvfISRYdRUkgb7Ewwb+4g0=
Subject key identifier: B8:EF:E6:22:DC:F1:45:73:52:62:9D:76:D2:56:2C:5C:0F:26:A5:85
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019CAD598E3C09F6225009EB3E728CB75927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 142B
Signing time: Mon 02 Mar 2026 07:00:53 +0000
Manifest this update: Mon 02 Mar 2026 07:00:53 +0000
Manifest next update: Tue 03 Mar 2026 07:00:53 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: W3Ekgn/DJyMtsLdpphuD3vm/tS1A6fuv+b01dnASPuI=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8e:3c:09:f6:22:50:09:eb:3e:72:8c:b7:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Mar 2 07:00:53 2026 GMT
Not After : Mar 3 07:00:53 2026 GMT
Subject: CN=b8efe622dcf1457352629d76d2562c5c0f26a585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:c2:9a:85:f4:ee:36:d5:f0:5d:ba:20:8d:
a9:40:32:61:c8:a0:32:55:98:d4:0c:bb:ab:38:18:
88:34:f1:df:81:39:b2:37:07:1f:d8:72:d4:83:67:
4a:c5:3a:24:40:4e:ee:67:3c:b9:00:9d:c1:b2:20:
90:5b:b3:30:48:04:b9:14:d8:aa:d9:d8:7f:1f:16:
82:94:be:e9:25:61:c1:59:cf:97:69:20:30:8a:70:
10:0d:86:0b:79:e4:ce:03:c6:52:8c:37:19:52:e0:
50:93:a9:b1:a4:07:dc:1e:7f:80:a9:57:f4:0b:c6:
bf:73:dc:56:44:a4:b6:2f:d7:d3:6f:9d:55:0e:3a:
34:59:8a:7e:b7:49:29:aa:d4:92:20:34:32:36:d1:
19:93:81:ae:9a:a2:c6:13:d4:ea:73:7d:71:10:db:
6c:77:a7:3c:c1:4f:45:53:12:f3:91:26:e2:5d:b9:
8b:1f:be:ac:fc:ce:a7:77:ae:9d:54:57:c8:d0:87:
23:0d:a5:81:92:1c:0b:48:e6:c0:31:b4:10:91:70:
17:42:11:4f:9b:d5:38:3a:3b:18:3e:67:94:44:17:
4e:10:3a:ec:ef:71:d0:d1:3e:a4:ae:64:02:7f:52:
e6:dd:8e:af:0d:98:f6:fc:e3:b7:ca:b8:52:3d:ef:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:E6:22:DC:F1:45:73:52:62:9D:76:D2:56:2C:5C:0F:26:A5:85
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:98:b0:d2:c5:9e:5f:54:89:5a:8d:e4:37:b9:10:4d:c0:
44:5a:f9:54:0c:62:85:d1:5c:39:13:8f:9c:96:4e:94:eb:48:
1f:eb:be:46:2c:34:bf:07:d3:80:c8:e9:7a:fd:3f:d4:8f:6d:
48:10:1c:45:8a:8a:83:ec:41:b5:b3:f5:af:15:b4:17:5c:b4:
0a:ee:0f:c3:57:34:cd:74:bd:0d:c1:2e:99:36:fc:62:f5:df:
f1:cd:15:70:1f:d1:bd:da:4d:ac:15:87:d1:de:84:df:b3:db:
d2:3b:e4:14:df:ea:c2:82:bd:d5:3e:19:71:9c:5a:16:81:6c:
d5:e1:73:40:c1:f9:69:8c:3e:51:d6:f9:f6:10:1d:36:cc:ea:
4c:ed:6f:cd:f5:47:b8:76:72:6e:b4:19:96:05:a4:b3:28:c1:
97:17:50:60:f8:d0:c8:a3:3d:0d:64:af:2e:c0:11:e8:1a:20:
23:8e:13:0f:c2:1b:c3:1e:ab:32:a3:2f:33:53:03:3c:4d:f9:
58:fd:a8:b0:ab:41:d1:49:ae:29:ce:f7:4a:77:3b:e4:ef:6b:
c2:bc:2e:d9:4b:fb:d0:c4:e2:48:db:51:28:e9:cd:b5:3b:ce:
2c:a5:5e:a8:8a:32:c4:08:0c:93:19:17:c7:ed:f8:ec:bb:83:
20:33:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:41 2026 by rpki-client