Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: YLayVYymS0iokj6KpWDtLNKOtamCd+sQWoFdbhf16d8=
Subject key identifier: 18:AE:70:B0:9C:55:CA:FE:B1:AE:B4:5C:2E:48:B3:6E:D2:5E:A2:29
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019CACB4EAC609E95C179491F213D740F8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0736
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: MAq1uPD5UdAMqGX93pt9NSdf8/Wi9i/kNHBhHs8l9rc=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ea:c6:09:e9:5c:17:94:91:f2:13:d7:40:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=18ae70b09c55cafeb1aeb45c2e48b36ed25ea229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:2c:8c:d5:c5:39:6d:67:76:87:83:6e:b8:
0d:bb:e4:99:a6:33:dd:74:11:e8:ff:b4:52:ad:19:
3e:54:5c:94:c7:eb:05:d8:74:27:ec:d0:5c:32:0b:
4f:06:b3:d4:04:31:19:df:af:c5:99:65:eb:7a:e6:
de:14:b0:b4:49:7e:3e:e9:87:8d:8a:41:30:b9:a4:
89:ae:5d:17:4a:cd:2b:d4:ee:45:d0:bd:4d:b9:e3:
c7:21:56:0d:5d:6e:1f:74:9c:3c:60:ba:34:2e:5d:
44:a9:ee:38:74:17:e3:43:52:63:a1:68:70:f3:32:
6f:4d:bd:13:53:ad:46:81:76:76:41:81:62:30:ab:
e5:72:e6:e6:a4:22:de:e8:23:3a:63:55:63:35:e8:
43:58:d7:bc:51:a1:67:05:7f:de:3a:dc:2a:d6:b9:
7e:55:73:8a:7c:00:8b:cb:81:a9:8f:85:cb:2a:2b:
73:6c:9f:38:9b:3d:ec:31:75:0f:27:40:2d:0b:b6:
08:f1:36:41:03:a3:e8:8d:56:98:fe:98:32:3a:6a:
1b:9f:48:d9:a1:5e:ee:ca:f6:57:f1:7a:e5:27:f8:
82:98:c2:dc:05:ea:ce:b7:13:56:72:10:4d:62:27:
66:16:cf:93:38:ea:20:f8:90:b4:37:04:56:d5:a0:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:70:B0:9C:55:CA:FE:B1:AE:B4:5C:2E:48:B3:6E:D2:5E:A2:29
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:58:da:f1:af:b2:6a:42:97:5a:52:81:0e:3a:1d:35:d8:7b:
ed:1a:b9:48:d3:f8:b6:0c:5f:e1:74:14:30:65:86:af:7c:60:
b1:ac:a0:6a:29:30:fb:74:73:5c:c9:6c:32:ab:11:a8:b1:b4:
5d:97:0c:4c:83:f1:f2:2f:73:d7:3b:6d:df:7a:d6:c7:77:9a:
f2:b5:ab:f8:ea:9e:ac:f7:a7:b6:17:b3:50:1d:ff:fe:4b:70:
26:8a:2f:a2:cc:8b:c7:29:13:f4:b4:ad:30:45:f4:a9:95:80:
d0:39:5e:08:20:96:f9:e9:a6:cc:e5:78:a5:db:4a:1e:85:e3:
55:82:44:f5:1f:19:ff:2b:5a:0b:90:24:d2:1f:a9:d6:d8:cb:
f4:6a:fc:be:aa:5a:dd:d3:d3:cf:31:be:65:b2:b5:df:23:99:
68:02:70:58:38:f1:a7:d5:20:53:30:69:06:30:d1:07:d5:da:
dd:74:50:d8:fc:0b:7f:80:7e:86:f5:df:4f:39:2c:c8:ad:01:
63:ac:75:32:d6:58:a6:46:6e:6c:ba:7b:fd:82:81:cc:b1:cd:
15:f0:ad:5a:e6:4b:4c:5c:16:e2:f1:f6:f5:91:6d:03:a5:b5:
9e:a7:68:fe:25:36:a1:ce:b7:2c:a2:6f:0b:c5:f7:67:68:4b:
8a:85:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:28 2026 by rpki-client