Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: xlhWxZXnUda9c+ZlOt0DIN3yZfcnHNRwk00Ktr1c7nU=
Subject key identifier: 9E:DB:C4:CA:EB:DF:E8:0A:ED:A0:54:99:6D:59:33:FD:02:0D:ED:36
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019CA9B3AA36EB027687AA5B88AC146F2B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0DF1
Signing time: Sun 01 Mar 2026 14:00:49 +0000
Manifest this update: Sun 01 Mar 2026 14:00:49 +0000
Manifest next update: Mon 02 Mar 2026 14:00:49 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: VCCc+C91teJ3H3qaGkibzRNBJIdVDbBWSOu7+rP/h4o=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:aa:36:eb:02:76:87:aa:5b:88:ac:14:6f:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Mar 1 14:00:49 2026 GMT
Not After : Mar 2 14:00:49 2026 GMT
Subject: CN=9edbc4caebdfe80aeda054996d5933fd020ded36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:d8:bb:6d:23:6f:59:07:c4:5b:b6:69:aa:
88:5d:ad:99:2d:23:a5:04:47:e4:3e:61:90:01:01:
74:4c:c8:3d:29:26:87:8e:03:fd:9a:8c:c7:54:83:
2e:1a:7b:0a:24:06:3c:c8:2d:c2:aa:92:82:c3:8a:
42:af:93:42:1c:31:db:5d:6b:54:d6:3d:53:f7:3b:
61:53:84:94:8b:22:36:19:f8:1f:b1:c9:be:6b:b7:
ad:9a:bb:60:21:d6:07:f2:50:5a:4a:27:9f:99:af:
f6:b0:11:94:da:92:2d:d6:13:fb:e1:fe:3f:a3:b1:
34:65:25:fb:a4:31:99:1e:50:40:68:a2:d7:c7:ce:
4b:e0:f5:90:cb:36:81:ee:79:e7:e3:f3:8d:ef:83:
82:43:20:e9:67:67:57:4f:f8:02:fe:d5:f0:af:eb:
e2:96:d9:d7:ef:b5:8e:cb:f2:3c:c7:eb:d9:ce:96:
b2:b7:59:b0:ad:fc:4b:de:16:fc:bd:07:f6:6d:63:
35:13:23:46:58:ec:02:2e:a2:1d:58:68:2d:fd:21:
d3:06:a1:be:f2:04:9b:4d:96:98:aa:a4:07:35:f4:
04:f8:53:9d:8e:50:45:ed:f9:36:d8:03:5e:b0:a3:
a7:3e:3d:b8:3c:fc:ab:2a:76:71:b9:14:3a:b0:e8:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:C4:CA:EB:DF:E8:0A:ED:A0:54:99:6D:59:33:FD:02:0D:ED:36
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:f7:d3:29:15:34:79:de:da:73:bc:10:eb:61:de:e8:af:
c9:fa:74:ab:ef:97:e9:f3:36:4b:3d:9f:2e:51:19:11:42:74:
fd:16:67:fd:f1:f1:0d:d0:fd:44:b3:66:33:ee:8e:12:76:12:
30:12:3a:78:75:ae:e2:e8:5c:2a:4f:a2:a7:2b:f1:5e:6c:41:
b5:a2:6d:b8:22:a0:1b:78:92:7b:2b:29:f4:5b:ea:e8:8f:03:
16:69:1c:0a:2f:f0:2b:14:0c:11:90:15:34:a1:83:96:86:04:
64:9b:f8:d3:22:d2:9b:3f:ea:b5:bc:07:60:59:1f:30:52:f9:
70:ba:df:d8:45:6e:ba:18:20:bb:69:8c:b8:4f:82:14:2f:8f:
79:13:b2:cd:ab:42:d5:3b:46:86:5c:01:3a:1a:a3:f4:27:73:
a7:e4:5e:42:84:8d:43:0a:39:36:1d:a0:a9:62:61:04:af:21:
ae:20:14:0c:35:ad:47:27:69:b7:ab:4e:10:01:1a:25:28:49:
f0:30:e4:24:d6:be:6d:c8:75:17:c6:60:a2:44:6f:e0:38:51:
92:84:9f:fd:2e:65:b1:f7:42:92:a6:8f:b3:b0:03:ec:dd:77:
26:db:85:ba:5a:58:c4:c3:94:1f:20:bb:7e:12:76:03:39:fa:
7e:1e:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:43 2026 by rpki-client