Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: kYlSdNG9QN3HjIA5NIb4IiZW+DvakXgk1u2ZFOLPVs8=
Subject key identifier: 2F:A4:D0:29:DF:E9:0F:CD:12:5D:5F:E2:BC:91:FD:FF:2A:2E:B2:C6
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019CAAC663847A871A4EC8813A5DBDF1D103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 067B
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: pZlUZ96asqKq0VWD/4EDDuUX/qw0TeDcv2W53fpeB80=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:63:84:7a:87:1a:4e:c8:81:3a:5d:bd:f1:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=2fa4d029dfe90fcd125d5fe2bc91fdff2a2eb2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:c5:db:f2:8a:d9:e3:4e:a0:5f:f9:0a:d7:
a9:a7:b4:d0:72:e6:8d:e8:31:18:3d:21:44:21:0e:
bd:12:90:f6:0c:d1:0e:c8:d6:62:83:33:7c:76:ca:
4d:ab:c5:4c:59:af:48:84:3c:73:51:34:65:17:06:
b0:27:db:8f:8e:d5:65:c0:6c:10:f9:c3:20:8d:ed:
1d:f3:60:2c:d7:dd:a4:7f:ce:ce:75:55:c2:b0:3e:
d2:64:17:42:87:52:83:52:52:75:97:15:be:7d:1a:
9a:21:3a:ee:c5:8a:24:cf:7b:36:ba:c3:c2:ac:4e:
69:1d:31:fc:a5:bd:03:97:58:be:35:d5:dc:c5:ba:
bb:c5:ea:64:3f:b1:9c:40:8c:dd:a4:71:33:3f:b4:
d5:8b:ec:d7:77:ad:7d:65:b5:db:28:e4:1c:b8:f6:
45:d8:5f:c3:ec:bd:27:35:2d:74:7c:f7:8b:b0:5e:
73:94:c5:43:01:48:14:70:61:9c:c2:3b:50:84:b6:
06:18:d1:a7:9f:82:53:3c:60:f2:93:37:e9:48:d4:
07:b8:86:8a:81:be:78:ae:bf:48:13:a5:3a:12:aa:
d9:61:20:d1:d4:2b:2b:06:6f:7a:7a:f9:dc:8b:86:
b9:ec:cf:fe:d2:da:1c:17:6f:43:9f:fa:0d:e5:da:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:D0:29:DF:E9:0F:CD:12:5D:5F:E2:BC:91:FD:FF:2A:2E:B2:C6
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:11:3b:97:37:67:fc:d8:c4:5b:eb:ad:17:53:7d:01:f5:7c:
a3:d2:45:40:9b:0e:e0:68:ba:2d:76:39:4f:ad:6d:8c:f0:b9:
41:36:24:b9:c3:22:be:1b:53:10:27:03:eb:6c:ac:11:cc:6e:
45:4a:37:d9:f8:25:95:7a:8d:67:05:b1:16:31:08:eb:54:e4:
dd:1d:90:56:50:d4:36:54:8e:c5:3c:ce:c6:34:1f:91:c8:f6:
94:a0:26:46:17:10:f4:21:76:bc:b2:cc:3d:c6:1c:0f:64:15:
df:bc:4e:88:7d:1c:63:2b:80:99:ac:b6:58:6d:ae:56:97:80:
97:f2:3a:0d:19:c3:ff:65:e1:f7:e5:1b:b3:ba:c2:ca:83:71:
53:cf:42:9f:cc:b8:d7:fc:b0:b3:d1:04:bf:66:ea:08:02:01:
e7:05:14:67:b2:69:cb:45:a9:f8:61:30:4c:79:29:3d:51:9b:
3d:f0:fe:d3:20:ad:a3:23:a9:61:1e:88:96:47:e3:2e:10:b0:
a3:dd:8a:c0:04:13:cc:a0:38:87:ce:45:62:95:b4:1a:f5:2d:
70:75:92:88:c1:d5:40:4d:07:4d:1c:db:7e:06:b0:3d:53:27:
bd:89:af:ba:3f:eb:79:37:f0:75:0d:33:31:d5:29:8a:67:71:
87:51:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:16 2026 by rpki-client