Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: EGx41UyBFHvKaspX4+csPiJ8KcQOee6rfz4hUfL50WM=
Subject key identifier: 49:BD:0D:98:CB:2F:5D:FE:E1:07:7C:3C:4A:4C:12:1C:B1:9A:22:5B
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019CAEDA03A0B96FA44379F27F5AF5EA229F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 35
Signing time: Mon 02 Mar 2026 14:00:49 +0000
Manifest this update: Mon 02 Mar 2026 14:00:49 +0000
Manifest next update: Tue 03 Mar 2026 14:00:49 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: wo2PQCNFhOva55TDgb3eFtBHochBwOQe64pwMcm59yc=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:03:a0:b9:6f:a4:43:79:f2:7f:5a:f5:ea:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Mar 2 14:00:49 2026 GMT
Not After : Mar 3 14:00:49 2026 GMT
Subject: CN=49bd0d98cb2f5dfee1077c3c4a4c121cb19a225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:e3:7b:02:4b:8c:8d:97:8b:9b:b8:d7:b3:
18:19:7b:f1:1f:fa:f7:b0:79:00:ec:cc:0c:d9:61:
97:39:d9:15:dd:41:fc:5b:3c:e3:e3:24:af:c5:5a:
40:b7:53:8d:bc:84:09:4e:8c:26:16:0b:e9:bc:e5:
20:39:d1:36:f6:40:57:82:05:21:ac:f1:5d:ce:05:
e3:f4:ed:59:9d:71:22:86:11:09:ff:3f:71:38:47:
b8:06:91:06:b9:e6:42:13:2c:e1:a6:23:80:35:4f:
c3:1f:b7:9f:05:30:7c:15:f5:53:6e:a1:5f:7d:6f:
0e:42:41:28:61:35:eb:1b:9f:c9:b4:b9:a3:e9:47:
f2:14:77:e8:c0:a4:e1:74:20:5e:91:cb:c4:4e:81:
30:ab:2e:0e:17:eb:41:ae:7f:f8:41:0a:ce:71:5c:
f3:b0:df:b6:84:24:ad:23:ac:da:11:f0:56:73:e2:
5e:6a:53:67:2c:45:16:aa:91:5f:24:a3:b9:7e:45:
11:ff:c4:44:89:a1:81:58:48:dc:85:5b:17:12:2e:
86:7b:1c:36:50:eb:3f:5b:ed:4e:8a:8c:50:cd:80:
68:e4:f7:d7:61:a6:38:eb:cb:7c:f8:18:6d:89:bd:
e3:96:67:a4:ee:f8:58:13:ce:05:b1:cc:6e:5f:6e:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:0D:98:CB:2F:5D:FE:E1:07:7C:3C:4A:4C:12:1C:B1:9A:22:5B
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:ed:6f:e2:7c:80:32:f5:2b:5f:b9:eb:08:13:b9:fd:4c:
29:21:6d:08:cb:40:6c:f9:01:7d:64:df:ab:50:c7:4f:17:6e:
a9:f4:34:5e:9f:d8:9c:09:ce:ce:8f:53:ed:88:49:23:12:d3:
d4:1e:01:c6:8e:a1:18:b9:80:c2:4b:c1:5b:4b:58:31:29:7a:
49:88:e8:2b:6d:4c:a1:78:88:c1:d8:6e:91:a0:08:a0:77:f5:
a6:48:14:65:f5:b0:03:94:aa:f0:b3:83:80:b3:96:bb:10:79:
5b:20:0d:30:ac:08:b0:9f:4f:a1:58:3d:21:c5:8c:8d:c6:37:
0d:97:d8:ff:82:69:83:2c:cd:3f:5f:db:83:e4:5f:82:82:d8:
c1:6e:1c:6f:99:ba:96:67:37:a1:e3:77:ec:78:b6:40:51:ce:
93:f3:a4:66:31:43:00:aa:ba:62:aa:fd:b9:8b:2a:2c:f7:1d:
7b:d3:fe:19:b1:73:07:b4:57:d8:2d:9e:b3:89:08:7b:b0:28:
f4:3d:93:02:89:c1:c7:d2:c6:c3:2b:ed:0b:3a:8b:dc:3a:53:
8d:b1:8b:a1:8b:ca:95:b3:97:97:09:c5:e0:8e:46:69:c7:d6:
2d:91:cd:8e:4e:bd:9c:f5:b4:00:47:2e:7b:db:77:2d:de:0f:
cd:6e:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:40 2026 by rpki-client