
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: 0eAWEQIzzPPyhzRPyhX/69GB1YQFrr/yrnt9lwsSizw=
Subject key identifier: 74:50:9D:68:9A:73:DE:3B:B2:2B:68:69:92:C5:C3:55:AC:10:5A:DE
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019CAE6C625EF46CFDB187A8C9512A0B873C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0F0C
Signing time: Mon 02 Mar 2026 12:01:04 +0000
Manifest this update: Mon 02 Mar 2026 12:01:04 +0000
Manifest next update: Tue 03 Mar 2026 12:01:04 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: HqvYuANefxCT6ThVavwcQZCRtGl9JHAShvxGJiGYd6g=)
2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:62:5e:f4:6c:fd:b1:87:a8:c9:51:2a:0b:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Mar 2 12:01:04 2026 GMT
Not After : Mar 3 12:01:04 2026 GMT
Subject: CN=74509d689a73de3bb22b686992c5c355ac105ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:9f:cf:cf:3d:03:3d:dd:d3:7a:71:de:d3:
34:44:7b:27:e1:23:e4:8d:7f:cb:4b:48:43:ce:07:
39:a8:e9:c4:b1:66:0e:9b:2e:7f:79:0b:3d:0e:6d:
7f:47:f4:d7:cb:ac:1d:63:3e:0f:1c:d5:ae:60:d1:
3f:4e:72:28:90:2b:bb:a0:59:bb:c6:66:fb:78:0d:
c9:6c:8a:69:fe:20:43:9f:52:c9:49:8a:3b:d1:d5:
c0:68:37:c6:f8:34:3b:77:62:e6:95:4d:e3:e0:f8:
57:7a:d3:38:83:4f:02:6a:6f:8d:15:24:4a:be:40:
b9:1c:7c:4e:fc:19:52:d5:de:e2:37:35:3b:7c:6f:
38:10:29:bf:7f:a2:c8:2c:98:84:13:d3:0a:36:41:
97:94:3e:45:ae:a7:c0:02:36:16:0f:1a:1d:36:83:
f2:dc:e1:d8:29:be:d0:ad:0f:3e:40:f8:6c:cc:9c:
ab:98:ca:05:c1:57:da:64:91:b1:41:b1:cb:75:9c:
81:4d:5b:f6:d0:71:4a:e9:74:28:2d:5b:04:cc:68:
e2:f7:d4:7f:6b:e6:8f:ae:44:2e:dc:61:56:24:e9:
6d:68:c5:81:ca:fe:e7:63:4f:06:ea:71:e5:d4:1a:
4a:ec:2c:b3:ac:4b:ce:2c:e8:41:03:9d:c1:d6:95:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:50:9D:68:9A:73:DE:3B:B2:2B:68:69:92:C5:C3:55:AC:10:5A:DE
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:06:f3:b6:e4:a0:63:f3:d5:17:62:76:ed:45:6f:98:bd:
32:04:73:8a:c7:69:35:1e:da:91:56:f0:91:7a:17:2a:e5:65:
a4:fa:4c:4b:8b:22:dc:84:dc:b5:de:6e:fe:2b:1a:f6:4e:15:
98:af:f8:2f:28:8f:e0:75:d3:45:76:42:53:f9:0e:bd:41:ce:
cc:32:06:ee:0e:01:31:be:09:e3:f0:ef:ce:8d:83:aa:5f:34:
ee:a3:a7:80:29:3b:f9:90:4b:8f:43:8b:73:46:85:4f:1f:d4:
a8:c7:1f:58:7e:86:19:0d:54:85:63:74:19:30:f3:1b:6a:bb:
fd:1e:65:24:43:bb:d5:5f:34:ed:5b:f5:71:57:ab:4c:d8:6b:
77:fb:25:a5:7c:d8:cb:0f:92:40:5c:62:5a:35:21:1b:97:b7:
5a:1e:d6:48:5a:b2:4c:f3:30:2b:2f:af:d1:f9:0d:a9:9c:ca:
b0:c7:01:62:84:20:5e:af:f9:4e:82:8b:f0:2c:d5:9b:d1:ef:
ca:9c:84:7c:ab:5e:ac:75:53:02:71:d2:3e:ba:f1:81:74:cc:
a5:cc:95:46:a9:07:50:16:df:f2:0b:e7:ce:f5:d3:02:43:ac:
e6:6f:43:b1:3c:f5:a0:e0:f4:93:75:62:28:68:87:e3:f5:83:
fa:2f:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:22 2026 by rpki-client