Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: waxqQhAD9aZjjrv+eIfB+MMEIJNgGfPTgykLdS7RXKk=
Subject key identifier: 8F:EA:A7:EF:59:39:EA:AA:41:FA:32:62:E9:D1:84:A4:B8:DD:F2:CA
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019CAAC713945099875CC7DD7A4A736FE5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: uGcUEiCLWyQTwCOG26koqkGnwwFeyV2wS1ogCRMtHAU=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:13:94:50:99:87:5c:c7:dd:7a:4a:73:6f:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=8feaa7ef5939eaaa41fa3262e9d184a4b8ddf2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:ae:b3:11:88:bc:ad:cc:79:8c:a8:2d:3f:
11:75:8b:ad:e8:b5:92:6e:55:e9:5e:a0:b5:1e:a4:
90:17:b3:ad:3b:3f:7b:5c:86:70:6d:50:bc:20:5a:
27:3e:36:8e:ad:fd:2c:9f:f8:30:0f:c8:ea:fd:1f:
92:b6:92:9a:1b:37:10:7d:5e:12:2b:0f:f1:20:3a:
1b:5a:e2:e8:97:4a:0c:4c:28:9a:40:dd:38:71:5c:
ae:ba:2d:55:a0:db:43:3a:44:7e:74:b9:d4:5a:5b:
9c:35:16:4c:df:ea:cf:8a:48:80:7e:80:fe:4a:8a:
9a:50:5a:a8:d1:b8:b1:20:05:47:0f:3f:09:0c:7c:
24:8d:05:74:84:07:d9:45:26:84:f7:d0:36:ac:00:
3f:0e:95:52:7b:c7:9d:04:5a:65:92:fb:bb:df:2e:
73:cd:10:1e:50:23:de:f3:e2:21:a1:db:db:01:df:
27:a5:3f:2d:a3:0e:89:a8:b6:c8:6f:ee:76:f7:b5:
c9:a2:34:e5:03:ec:f1:84:fd:4e:44:47:87:ba:4c:
31:d5:63:ee:c9:d9:54:23:20:b4:fa:8a:cd:4d:1b:
70:26:92:75:f6:de:6a:34:94:1c:b9:67:78:63:77:
55:c8:e1:00:69:26:ab:6c:4b:db:7b:9a:41:8a:aa:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:A7:EF:59:39:EA:AA:41:FA:32:62:E9:D1:84:A4:B8:DD:F2:CA
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:ae:0c:08:3c:0f:36:b0:a3:84:ca:ae:bb:5e:58:2f:e5:
5b:0f:5c:29:49:2c:c4:b7:79:cf:e6:e7:d0:b7:1e:ec:6c:9b:
bc:68:47:d3:46:c7:c7:e0:5e:c1:ba:14:46:f9:5d:28:7b:e5:
7c:50:6c:32:e6:cc:56:c8:08:a4:80:24:2c:05:4a:fa:bc:61:
fa:b1:5c:e0:0f:c4:52:70:29:ff:45:1d:d2:da:ae:3b:39:42:
35:03:45:b6:2d:c7:65:21:64:a3:d0:fd:4a:0f:c8:b1:5a:22:
c3:63:4c:e7:8a:b6:70:81:a9:3e:52:24:f1:69:d7:49:b5:c3:
33:d5:a6:8a:93:3d:63:ac:6c:da:cd:8e:6f:d0:d1:42:b2:6b:
3a:83:41:f7:0e:09:5d:0a:01:4c:b7:28:23:39:7e:6b:59:4e:
a0:b8:89:d0:e1:da:21:c6:06:9a:3e:ff:4f:c2:0a:76:3a:a7:
84:5f:96:bb:14:89:03:b9:35:97:65:e7:89:75:77:9d:5a:c4:
e5:aa:79:bb:de:fd:6d:be:7e:b3:4a:26:48:c5:8a:f6:b2:50:
a0:c6:d6:5c:31:27:4e:af:79:02:29:76:e0:ef:02:67:5f:18:
4b:59:ea:b3:83:0e:a8:1b:5e:ba:68:74:a3:1b:13:02:6a:6b:
9c:94:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:04 2026 by rpki-client