Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: kH9UNkQqeCnqqmTAqBE4HIwkjyrpCBxCm+1tKU5wxeU=
Subject key identifier: 3D:0D:10:40:C0:75:B7:60:43:B1:29:A9:39:77:33:B0:F5:BB:9E:6E
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019CACB4952BA2C04D2E612D8A2DA88AD931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: gd3ivwNbeme+Y7NKAIwdCXAYx6OBeLN855ayCX/IBgM=)
2: 4OGXKSCe69WbBAqnHrdUacn2xvY.roa (hash: Bo3VASp3hqdpjkuTRhHGGHpuPELAAuy1usZK3W9YkB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:95:2b:a2:c0:4d:2e:61:2d:8a:2d:a8:8a:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=3d0d1040c075b76043b129a9397733b0f5bb9e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:83:9f:01:c5:43:26:88:b4:52:ae:18:71:
b2:27:97:92:62:91:00:14:e0:13:91:76:93:62:64:
86:72:3f:e2:45:35:5b:af:97:50:7d:13:5c:0a:74:
06:42:07:1d:49:67:fa:5f:03:a7:fc:58:54:0a:14:
af:ca:8b:90:41:19:fb:9f:32:69:bc:49:90:ff:38:
bb:51:cf:f9:ec:1c:4a:ba:71:14:1b:fd:a8:f7:30:
57:ba:63:58:63:95:32:4d:b9:6d:01:b2:7e:7b:0e:
4c:e4:65:bc:64:03:52:05:43:d3:eb:e8:f4:b6:62:
d0:0e:2d:e4:21:ef:8b:1a:2d:29:2e:75:dc:ac:17:
7e:75:98:3d:b5:e7:66:a4:4a:84:bf:ff:f5:43:c7:
be:8f:80:72:91:9b:d8:f6:c6:44:3b:90:21:9b:81:
5e:ac:60:c1:d8:ef:e4:8b:96:50:19:18:3a:21:62:
6c:f1:45:df:60:02:11:f3:9c:6f:2c:fa:b2:8b:17:
31:9a:01:b2:43:87:03:1b:70:48:c0:c8:c4:e7:62:
c3:aa:8f:ac:19:47:76:b4:a2:2d:d1:15:62:a9:ca:
34:a9:83:c1:cc:25:ae:04:70:d6:64:a4:63:48:dd:
9e:78:33:ec:4c:5f:39:94:f7:df:54:20:87:e4:7b:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:10:40:C0:75:B7:60:43:B1:29:A9:39:77:33:B0:F5:BB:9E:6E
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:ce:73:7c:d4:c6:48:11:00:2b:a8:eb:d3:95:4e:b3:92:
84:20:3a:ca:63:26:15:a9:2d:1d:44:0e:33:6b:b9:07:89:68:
81:db:c6:d5:68:eb:32:65:6c:12:c0:a9:37:af:f1:23:8f:f1:
66:4b:c2:d1:dc:a4:2d:9f:31:e6:87:6c:72:02:3e:0b:7b:96:
94:e9:30:84:11:9d:38:96:09:40:84:69:be:33:66:19:1d:8b:
91:25:d5:e1:eb:6e:eb:57:78:ae:c9:90:33:e8:59:d4:e8:b2:
ab:ca:f9:0b:68:81:53:ac:91:30:1f:58:6f:5f:63:a9:21:d0:
a2:d5:96:39:a5:55:be:86:35:14:2f:3a:d9:32:5d:ef:26:b4:
ec:51:e7:d2:94:01:90:95:68:e9:40:5f:c0:0e:f5:77:6f:23:
7e:ce:b0:79:23:2a:4a:cd:af:91:28:1f:cc:5e:58:8d:bd:96:
5b:81:26:23:83:fd:46:b2:df:67:ab:fe:97:a6:22:1e:f0:16:
49:15:d7:54:1d:f6:34:94:8b:f2:4a:6e:d8:ec:8f:37:dc:48:
62:0d:4b:de:a1:64:b9:9c:29:05:56:c2:f9:22:88:28:00:34:
48:39:4c:7a:fd:b3:2f:33:21:a3:aa:3f:f4:fa:33:8a:2a:e0:
57:d6:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:58 2026 by rpki-client