Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: IqhOM/Tx+G+HRcUGe2xp2CHqbfB/hBOuisWuCmDHp/I=
Subject key identifier: 9E:15:E1:06:60:8C:71:78:DF:23:B1:B7:B0:BC:33:E6:B3:73:46:98
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019CACEBAE62BED9B2CAF259EFF6106CE5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1203
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: DOQeoIrnQJarptCD1rM4Jfqi7Sn/VaU5USNuua1W3qE=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ae:62:be:d9:b2:ca:f2:59:ef:f6:10:6c:e5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=9e15e106608c7178df23b1b7b0bc33e6b3734698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:d7:6e:a3:78:fb:f5:f3:85:98:c6:c2:9a:
8c:31:ba:fd:af:54:18:2e:37:f0:84:d7:7e:66:75:
ba:b0:94:26:ac:4d:0d:45:6a:db:2c:0e:12:bd:2d:
ea:df:3b:85:d7:be:49:49:42:87:65:54:6f:87:b3:
57:93:b3:9f:02:04:e8:c0:24:3d:2d:7d:dd:70:22:
4b:49:e4:c1:da:46:c5:1a:7f:d2:55:dd:cd:6a:05:
a8:70:a8:03:51:b8:c0:34:2d:a4:f3:dc:e8:c7:0e:
2c:50:a4:5e:85:23:f3:7d:df:7b:9d:85:ef:2c:a5:
fa:bd:38:0e:5d:0f:e0:c5:8c:4b:77:e8:69:67:cc:
92:0b:de:de:07:b8:56:d2:c1:0d:b1:5f:1b:17:8b:
a6:70:b1:ce:61:bc:d8:16:d0:b9:86:2e:a6:65:3f:
4c:cc:b2:67:5a:cb:75:3c:39:e3:f3:59:c6:7e:06:
7e:5e:6f:ac:a2:10:f2:84:de:eb:16:2c:d5:44:94:
08:cb:fc:f4:c8:df:3d:9c:5c:27:6a:c2:d2:0a:83:
86:c0:50:34:e6:45:92:cf:42:41:d5:97:00:10:3c:
16:3b:8d:ad:51:56:c3:5a:f3:1f:59:e4:05:96:e2:
4d:3f:0a:56:02:05:72:78:ca:8a:cf:1d:fe:c5:43:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:15:E1:06:60:8C:71:78:DF:23:B1:B7:B0:BC:33:E6:B3:73:46:98
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:77:cc:ba:a0:ce:eb:0a:04:32:be:89:6a:72:ed:8c:de:ab:
d4:2c:1a:a4:3c:cf:68:4e:44:63:26:59:c5:cc:24:63:a0:57:
76:24:42:c8:24:62:17:2d:4e:93:22:24:7b:52:93:04:bd:91:
07:95:9d:7a:6b:1b:73:19:ce:67:2b:3f:05:1d:94:2b:47:44:
f1:df:31:3b:ec:5e:dd:19:2d:3d:1c:e1:24:85:4f:86:8e:3e:
9f:c9:ec:17:74:e0:c0:d0:b7:fe:68:bf:b6:8c:d8:36:08:12:
d7:32:12:6e:f4:98:1d:57:fb:0d:dd:29:30:91:d8:cd:0c:ba:
4b:a6:83:58:9e:ba:ab:ee:b0:de:aa:ca:0a:0d:23:1a:4f:24:
54:7e:88:31:b7:01:e1:95:31:9a:b6:f8:bf:3b:8b:52:59:82:
4e:60:89:5f:07:81:3f:92:d3:d4:5f:da:17:12:90:67:e6:b7:
05:c5:a8:1c:50:5c:bb:5e:a1:f0:8e:e5:c0:7a:5e:ab:af:c2:
7f:37:c6:26:ed:0d:52:10:8a:3b:27:81:2a:2b:89:19:1f:c8:
94:e2:cf:56:0a:67:8e:55:f4:7a:85:e2:95:60:ed:00:e7:c7:
35:87:e5:10:16:43:f2:0c:45:61:b5:29:e7:71:54:93:63:bd:
0c:5e:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:14 2026 by rpki-client