Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: aolp2tA1Rwb3Zky2xZJSbb1BCpCykzWm3/g+bYtdycI=
Subject key identifier: B1:02:4D:5F:42:8D:2C:1D:5D:AE:9C:CC:2D:15:D9:96:D6:35:DF:24
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019CAC7E0C45F8AD6C6C70D2A614CBDF3262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0F0B
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: 5SHrNILNuR6YixrzJ7h4I1M50aw4vYRF6vdMvap8ado=)
2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0c:45:f8:ad:6c:6c:70:d2:a6:14:cb:df:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=b1024d5f428d2c1d5dae9ccc2d15d996d635df24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:91:6f:2d:a0:24:3c:d6:3f:4f:a6:7d:3f:
21:af:48:09:f3:0f:77:18:2c:29:6d:95:57:4b:d2:
48:e1:24:09:eb:2f:3c:8e:0a:95:ae:df:85:8e:73:
34:6e:fd:6a:a0:a1:a0:85:78:11:a1:e8:17:64:18:
8b:a4:57:05:a8:76:ae:fe:d5:f1:3a:51:7c:aa:b0:
28:a6:69:93:49:68:0f:33:63:05:e8:08:40:a8:24:
1b:66:6d:9c:eb:e5:a8:42:9f:c5:8a:75:4a:7e:b9:
e0:0c:2d:8c:dc:4a:8b:66:13:2e:b4:47:a7:4f:81:
f0:98:35:1a:9b:6e:a2:43:bb:79:59:2d:9a:89:bc:
31:99:e0:fd:7b:a2:ed:61:16:9c:74:ab:6c:da:9a:
05:8f:71:78:76:fa:9e:db:d4:f6:ce:f0:9a:13:ed:
77:8a:a9:3e:c3:7c:ca:fa:d7:58:52:9a:60:b2:12:
36:69:df:6f:7e:85:e0:ca:d4:7f:5b:46:71:40:da:
6b:77:d5:6f:a8:34:0b:e1:38:53:ff:d9:2c:9d:be:
16:49:ca:8e:2c:72:2a:d7:0f:0e:4d:99:09:1a:6f:
29:8b:bb:4d:a9:fe:82:01:94:b8:09:86:31:c4:23:
d8:e7:a9:37:1c:1e:3a:22:78:ec:28:d1:bb:eb:7c:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:4D:5F:42:8D:2C:1D:5D:AE:9C:CC:2D:15:D9:96:D6:35:DF:24
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dc:56:ef:a8:f6:11:b9:65:a9:c7:63:2b:90:ac:f0:5d:f3:
7e:f9:ee:be:06:73:0f:60:fd:d7:c5:ff:dc:a3:a6:ce:82:70:
23:9c:fb:40:ff:96:e8:33:a6:0d:8a:ce:f3:85:fa:4a:59:20:
5b:4f:67:16:0c:43:44:0c:94:16:cc:bf:a6:f2:d2:74:6d:e7:
94:12:9c:d5:f4:0a:b1:8a:d1:c9:85:ee:99:5b:6d:4b:22:7e:
5d:67:b8:a7:49:1d:66:fa:0f:5d:6e:8f:52:a1:1e:96:e3:b5:
1e:9a:c7:cb:13:19:5f:98:e7:bd:87:6d:81:cc:0b:94:bd:75:
f0:87:cf:47:95:c7:67:be:57:df:c6:93:c1:57:e2:8a:43:56:
55:54:cb:cf:a2:30:3e:1d:46:b6:86:63:fd:a4:75:5b:ba:9a:
9a:ea:ca:f6:23:c3:77:08:b9:40:85:98:3d:9c:55:db:cb:f9:
2a:99:44:24:82:ad:b8:86:35:0c:da:3d:52:17:5c:94:ba:c2:
c6:f1:b3:15:2c:68:8e:75:48:11:9a:d3:40:5b:42:b3:a0:f1:
e6:13:ee:2a:27:29:71:0e:7b:45:c6:ea:ae:5a:65:18:23:40:
70:d8:f5:59:aa:a0:d7:4b:92:9c:a8:c3:08:7c:a3:e6:5b:ef:
ac:b9:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:43 2026 by rpki-client