Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: 3hPpzc2G71IvCSL+t24lUl1F6zmhY5xbOhKdz1tUuc4=
Subject key identifier: EA:5A:5A:19:77:35:64:04:F5:04:59:FA:81:B7:EE:1C:F4:03:05:06
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019CAB34372A869100063AC1F99B020698C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0AF1
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: d3ZtISu60IdSgwKryxxejfP56KOs28BDMtyMyum8V2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:37:2a:86:91:00:06:3a:c1:f9:9b:02:06:98:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=ea5a5a1977356404f50459fa81b7ee1cf4030506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:dc:97:12:50:63:50:01:bb:d2:26:26:60:
87:26:0e:9c:15:6b:f4:0f:80:1d:c3:d7:93:90:2e:
2a:4e:c7:7a:3b:d1:a8:24:de:6a:d8:91:61:3a:13:
46:12:47:84:7f:e5:b4:25:ca:68:e3:d5:70:80:9a:
ae:9b:ef:ef:2b:e7:7e:6e:04:c3:4e:57:5c:8f:39:
85:b3:9b:6c:c5:f1:5b:32:c5:ac:cc:df:02:2e:7b:
a4:30:e3:37:64:d1:37:f6:f5:bb:32:7f:fe:a1:2e:
90:a8:08:90:d5:40:92:d9:57:43:e9:d7:23:e7:9e:
6c:1c:ba:a5:dc:70:2f:82:55:15:9f:24:35:23:67:
12:0f:0c:e1:c4:15:8e:ba:fc:65:61:98:57:4d:1e:
73:4b:78:4d:79:98:a1:2e:74:5e:13:94:b2:b0:59:
92:57:23:e3:61:cd:16:79:4a:98:f3:d2:18:35:65:
48:66:51:eb:80:cf:9e:85:a6:e9:cb:34:87:c4:cd:
00:f5:c2:f1:6b:43:71:4f:1c:08:e8:2a:7b:82:89:
36:78:42:06:54:20:9f:bb:0d:be:47:74:8d:ce:6a:
db:9d:b8:dc:89:02:9d:e3:d3:01:4d:f9:ce:89:c6:
68:84:09:d1:8b:1f:4f:14:3b:5e:5b:01:1f:3c:92:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:5A:19:77:35:64:04:F5:04:59:FA:81:B7:EE:1C:F4:03:05:06
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c7:e5:f2:45:19:d5:c7:18:46:e3:0b:10:e4:ef:55:a5:62:
76:e0:06:db:b6:7d:ac:8c:d4:e2:24:74:7b:c3:81:7b:88:a5:
e0:52:95:a9:c3:39:3e:b5:ee:73:20:34:5f:ee:6e:e8:1a:10:
c3:c9:40:fd:ad:81:7f:ec:9e:2c:1d:c1:b0:1b:46:3f:4e:01:
e8:22:0a:f2:5d:b6:20:6f:45:b4:37:7e:bd:51:37:a7:95:ec:
98:74:39:cc:12:6e:e7:4b:2b:02:cd:9e:d6:8a:6a:c6:3e:64:
fe:a8:b5:d5:a2:3d:67:79:71:f7:f7:fa:e0:47:6e:ef:9b:4d:
ee:11:12:22:4c:67:f7:09:1a:3c:e1:97:f8:5e:e1:4a:f1:aa:
a3:cf:d9:2c:d4:00:a5:5b:b1:55:b1:50:55:ff:3b:bd:0b:b3:
ad:32:2c:26:01:a0:27:b9:0b:d6:02:e4:da:85:4a:a6:3b:ac:
19:e2:42:e7:2e:7a:43:96:7d:61:29:7f:c9:c8:e4:30:92:92:
0a:dd:57:d4:fa:02:0e:df:a6:51:38:5b:6f:19:d3:1a:8a:7b:
50:da:ad:3d:13:e3:b0:e2:b2:5c:09:06:c2:fd:4d:1f:6e:70:
13:01:cf:42:44:65:42:91:9a:22:22:0b:75:8f:98:8d:0e:2a:
45:aa:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:43 2026 by rpki-client