Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: iJO2kgK0V9oEO3MnFlgo/irEBoTFVOu96ui9glEa4K4=
Subject key identifier: 7A:1A:CC:FB:B2:F2:24:0B:22:EA:F0:F1:61:92:FC:90:BD:73:7C:22
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019CAC7DCAD369436115D23EE0EA521944BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: whud9vfsNhq6Xh2pau96L8ayGBPcSmLQM8pd98I74ow=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ca:d3:69:43:61:15:d2:3e:e0:ea:52:19:44:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=7a1accfbb2f2240b22eaf0f16192fc90bd737c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:42:42:89:ba:6c:5c:79:45:ec:ab:ac:d0:
a1:fc:b0:28:27:9e:41:cb:87:4f:0a:fa:d3:2b:0c:
90:0d:b7:81:a2:af:76:c1:f8:e9:48:b2:88:75:24:
4b:b0:f6:fe:55:65:dc:26:e1:65:95:1e:29:06:b3:
a5:eb:c3:47:27:0e:07:0a:92:d4:a9:fc:db:32:0b:
10:40:c8:45:e1:10:25:87:09:70:b8:37:7c:23:40:
b8:59:50:c9:ae:b1:10:c5:9c:08:a3:93:85:b0:7f:
35:4f:dd:e2:2c:35:cc:ec:1c:f0:33:fd:55:90:c3:
c3:c5:99:a9:b5:69:49:e9:ca:0d:ef:9d:61:ae:92:
49:7a:f5:f1:ce:66:c2:e8:3e:3e:20:91:9a:5a:cd:
95:f1:c3:e0:fe:4d:2a:e8:80:e1:f6:56:1d:44:25:
0c:c3:6c:6e:fa:93:fb:24:bc:2c:00:39:4c:80:7d:
d5:e7:ee:53:3a:b7:23:e0:c2:be:bf:e2:36:80:c4:
6a:49:1d:8a:00:bc:48:73:37:e9:db:e5:aa:1d:9a:
a1:10:35:cb:00:07:09:b5:ea:e6:44:8b:ad:61:98:
60:47:f5:de:21:6d:9f:6f:d5:9c:ea:7e:e9:e2:b9:
61:14:4e:23:a7:16:59:4b:09:a6:89:64:80:33:60:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:CC:FB:B2:F2:24:0B:22:EA:F0:F1:61:92:FC:90:BD:73:7C:22
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:c0:ba:b9:d7:8c:23:3c:75:64:34:43:ad:40:0d:0f:0d:
5c:08:cc:e4:a2:ab:96:53:4d:19:11:e4:f9:be:c4:c4:45:10:
27:65:39:44:5d:1a:39:a5:3a:4e:51:40:33:9f:79:5f:f0:9b:
ed:5e:c1:c7:33:e2:1e:88:0c:c4:3c:99:a1:18:ce:fe:99:26:
cb:7a:8b:e6:6d:e5:81:15:e4:a6:00:c2:bc:77:6d:17:0d:54:
30:46:6a:3a:aa:4f:0c:c5:b1:4c:32:cf:82:01:24:d9:c2:a9:
2a:87:43:73:3a:2c:13:cb:94:d8:c2:63:53:5a:ea:4b:69:3c:
30:65:0a:8d:e1:5b:15:b7:a9:86:0d:87:51:a1:0e:ff:f8:e5:
bb:e9:cd:62:47:df:94:2b:e5:92:fd:05:5e:f5:22:e7:a2:09:
cd:6f:62:36:ac:fe:70:35:a0:fe:85:90:36:33:ae:07:8c:87:
f1:a0:9b:7e:ef:e1:c9:ff:d1:a7:28:14:19:e7:38:cb:19:ac:
b3:ff:91:e5:0b:ed:8e:ed:9f:37:0a:cd:eb:59:e6:18:c4:a0:
56:2b:c8:14:9e:25:03:57:43:11:36:b5:ca:16:5c:f4:78:02:
66:29:1c:93:84:da:71:32:26:8a:21:aa:17:0e:29:61:49:fc:
1b:91:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:06 2026 by rpki-client