Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: syIHPm69yot8MGyh865X6PL0Qn4ZxuKrgoi782M6IF0=
Subject key identifier: 21:CE:D2:F6:90:E1:B2:1E:89:28:97:22:95:1B:BE:12:B4:D0:AA:BF
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019CAA8F5147D5BD62568F89D23BF6124DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0E42
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: bE60UCQfTja6WR/2ZZg88wfxcXEUJNjWDU2ngO2itmw=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:51:47:d5:bd:62:56:8f:89:d2:3b:f6:12:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=21ced2f690e1b21e89289722951bbe12b4d0aabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:a9:da:d2:93:80:93:a4:21:05:c5:7d:80:
c3:36:0d:6a:f2:26:af:4d:34:98:7a:47:a9:11:21:
56:3d:cf:dc:9c:aa:0e:94:e2:33:fd:2d:64:0c:27:
09:c5:b0:4b:6e:d8:d8:07:43:6b:bf:ad:6b:f1:a0:
34:fb:1f:45:17:6c:87:1b:9b:89:18:ee:9f:45:f8:
9e:19:45:40:8b:95:a3:12:b7:76:88:b6:5d:bd:ed:
bc:61:5f:79:6e:ab:2f:cd:a8:80:51:4e:c4:86:17:
72:3c:98:dd:7b:8c:ec:0e:97:38:24:97:5c:34:96:
ec:9c:a5:58:c7:99:6b:df:c4:ae:9d:68:07:50:ad:
48:11:85:b3:4c:23:5f:a1:2f:2a:ef:5d:c4:ef:9d:
61:05:c7:42:f3:c9:06:19:46:79:ea:d8:a4:87:8c:
96:f0:bf:61:6e:97:ad:b0:a5:65:2c:1a:96:93:2f:
f7:00:b8:75:eb:10:55:f3:54:ef:c0:62:d1:c2:5f:
a9:88:47:77:26:55:11:75:7b:bc:3c:ec:e4:bb:83:
61:4b:45:91:b3:6a:35:c9:1b:4f:ba:b9:a7:ae:b3:
1f:92:e7:72:7a:e5:bf:40:64:5f:04:ec:ec:fb:9d:
07:9c:f1:dd:bb:81:52:d8:78:18:34:27:e7:10:6b:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:D2:F6:90:E1:B2:1E:89:28:97:22:95:1B:BE:12:B4:D0:AA:BF
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:83:ad:24:0d:82:7c:fa:42:5c:94:2e:14:29:ff:dc:98:0d:
a4:88:02:72:e2:e3:fb:bf:51:91:ad:77:77:ff:68:e3:7b:f5:
54:b7:35:62:40:08:ae:53:96:d7:73:c4:b0:36:91:ca:de:ea:
6c:05:af:a3:71:57:2e:fc:f3:96:a4:b3:1c:f4:2f:97:79:45:
1e:9a:34:92:88:d1:37:65:7a:cd:88:fa:65:8a:77:27:2a:85:
db:f6:7f:35:f7:0f:c9:8e:8d:45:18:46:41:e4:aa:4d:3b:07:
ca:5b:bb:96:7c:97:cb:9f:91:95:33:d8:35:e3:e2:9d:12:25:
4d:97:78:72:37:b4:df:e6:01:b9:3e:50:0b:d0:3a:d8:2f:60:
ff:3b:60:0c:e2:1f:af:b7:6f:36:9c:8e:d8:07:6e:4a:b5:d3:
1b:3f:ca:82:37:1b:bc:1a:64:c9:5e:66:41:eb:63:be:16:a7:
5d:82:e3:67:50:b5:45:7d:01:aa:a5:f9:ff:6e:3a:49:2f:59:
89:51:4c:ba:38:55:39:e6:a7:64:b3:5b:51:4c:f8:53:43:c9:
55:f9:b0:40:be:d6:78:fe:82:3f:61:31:22:d7:ab:9d:bd:9b:
ad:a8:63:ce:fc:23:c9:d7:77:d2:47:b9:16:ab:98:54:03:17:
ca:b8:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:48 2026 by rpki-client