Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: ejScdCsbOx4My3HlNeMXXoPykp9T3XvUyF2CxLyoZ98=
Subject key identifier: 4D:9A:84:D9:06:C6:19:AD:B0:E0:DB:80:4A:96:E2:E6:A2:DE:D7:5A
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019CAA5894BF2B375F9BDCDEC2C5925923A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1379
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: Nu2fk07ENVtzITGXaAiZvtG422mfP6iiCe4uXtJDoxw=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:94:bf:2b:37:5f:9b:dc:de:c2:c5:92:59:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=4d9a84d906c619adb0e0db804a96e2e6a2ded75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:23:ab:e6:cc:bf:49:f8:d8:68:27:4f:f1:
8f:93:3a:e5:a6:56:1c:e8:ac:b0:06:2b:f5:60:c8:
b6:26:f2:1b:42:fc:77:4c:3d:bf:58:de:0f:07:37:
2b:f1:fa:28:c7:60:d2:6e:7b:45:8b:e5:56:0f:24:
dd:09:69:1a:14:29:c4:5a:ab:b8:d7:bc:91:8f:c1:
50:01:30:0a:60:c1:39:a1:8c:e9:d3:1f:6c:e2:70:
0d:bf:04:66:94:ee:e7:0f:6a:f1:19:76:96:8b:77:
0c:ac:f6:38:e7:80:16:8c:cf:2e:f1:23:f3:e0:5f:
05:6f:b1:b2:5e:2e:ed:fa:25:28:32:16:98:fb:35:
17:a3:44:46:97:4e:de:f9:f7:b3:6a:95:d8:43:37:
d8:38:c4:61:b0:45:20:09:90:2c:77:0a:fb:c7:c5:
9c:70:56:13:8f:8c:42:86:19:f4:b5:97:f3:4b:65:
11:07:27:b5:f4:eb:8e:71:d3:ff:eb:3e:17:67:49:
76:03:13:2a:89:5a:53:47:24:32:f2:3b:f8:3d:a3:
68:5d:35:d7:e9:b2:ab:58:8e:97:38:dd:66:97:8c:
ce:66:8a:d0:5b:f7:65:d4:b0:55:c7:33:4d:9b:28:
84:29:d1:27:62:b6:34:ec:4b:b3:6b:24:75:fb:16:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:84:D9:06:C6:19:AD:B0:E0:DB:80:4A:96:E2:E6:A2:DE:D7:5A
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d0:10:11:b9:0d:ab:63:c3:f1:d4:02:04:99:81:2d:d0:24:
c6:82:4a:df:21:75:de:d6:80:c9:a4:da:fb:a5:ef:28:8a:82:
bb:07:96:29:42:10:01:1a:da:e1:77:75:24:bc:06:dc:ff:fa:
4b:ad:03:61:04:76:f8:f6:6b:06:f5:ed:37:0a:9b:3d:2a:45:
c3:f8:54:f1:4f:22:27:0c:4b:9a:ac:a1:83:c1:39:ff:12:f9:
fc:59:35:44:11:03:e2:93:28:33:13:7d:a0:a4:c2:11:dd:cc:
2a:1e:9e:a9:49:1f:b7:81:93:fe:d4:74:45:7b:0d:72:68:20:
e3:9d:5b:9b:65:92:a2:10:78:cb:9a:df:f7:c5:bd:e8:4e:b7:
8f:03:b2:74:5c:6f:c2:7e:0d:16:62:19:fc:26:33:2a:f8:25:
e5:55:03:78:8d:b7:51:d0:fd:27:cf:6d:8c:9d:ca:d4:51:9f:
50:2a:d5:18:f5:ef:52:a9:92:79:5b:36:b0:f1:6e:28:8d:d4:
fa:6c:d4:60:83:52:9f:25:df:69:78:ad:54:61:87:64:6e:d0:
84:3e:81:2e:a2:6b:c5:e1:4b:5f:18:41:16:47:ac:68:b1:a1:
ca:f3:1f:58:e0:39:e8:ce:7d:27:d4:5e:eb:25:99:06:27:32:
68:50:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:37 2026 by rpki-client