Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: aERI1636eievp67Bbhsyr2WPp1xiZmGggtX4zVosGs0=
Subject key identifier: 95:90:E0:FF:FE:23:87:AC:02:F3:07:9B:25:F7:15:58:DE:03:38:AE
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019CABA262B7ADAE3ECFF54AFEE5B28B776D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 148F
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: xVFDl0F9xZmRzVGKCn2O+fNnIqZITk7PJqRk4FBxR/Y=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:62:b7:ad:ae:3e:cf:f5:4a:fe:e5:b2:8b:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=9590e0fffe2387ac02f3079b25f71558de0338ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:07:16:ae:1f:17:c0:5c:21:fb:02:6c:02:
aa:8c:5b:12:b9:72:28:a5:51:a4:ce:20:67:92:e1:
ee:7e:da:2c:ec:d2:d7:27:21:f4:fe:f5:af:09:e5:
42:42:42:1c:1c:ac:73:1b:81:34:ef:2c:e8:bf:14:
74:0c:92:49:10:df:e9:50:97:d2:cd:82:83:eb:7f:
3a:12:9a:7b:fa:5b:bc:c7:65:f0:0d:82:d5:84:0a:
c1:f6:f0:33:fe:bb:ea:e9:83:58:44:67:5b:31:5d:
e1:70:1e:3a:15:87:65:c9:12:2f:d5:b6:de:f5:40:
a7:05:07:db:9e:2b:a4:3e:1b:3c:92:79:61:ce:9e:
91:98:2e:1e:dc:21:3c:f9:2c:a8:f4:30:89:f6:5b:
40:ed:69:1f:ef:af:18:92:b3:2c:9b:0e:ba:df:a9:
0a:09:0b:e5:a3:89:96:a0:cd:39:d9:ea:99:78:90:
4b:ff:99:6c:c0:e8:a0:58:0b:07:43:be:91:1e:1f:
87:fb:bd:f7:32:89:e7:f7:e3:8e:87:fe:7d:59:7a:
da:d0:82:c7:5d:84:01:54:d3:9e:86:63:3d:33:25:
ae:0c:46:81:d6:b1:b5:34:92:69:a4:fa:d1:af:ec:
04:d9:29:49:8e:73:56:4d:f4:72:e9:fa:03:5a:62:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:E0:FF:FE:23:87:AC:02:F3:07:9B:25:F7:15:58:DE:03:38:AE
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:88:28:0c:69:db:4b:49:08:04:ca:75:fc:cd:ae:21:9f:3a:
e4:f0:1f:84:22:a1:ac:e5:c7:75:59:47:bb:f0:99:c4:a9:2d:
67:13:df:7d:d3:df:49:ff:19:1a:fc:d6:20:ae:ba:7e:4e:ef:
36:e4:e1:bd:eb:66:df:44:db:e2:1a:86:9b:94:57:b7:27:42:
cb:13:27:e8:f9:72:88:63:c2:0e:f5:5f:70:2d:a6:c1:3f:5c:
c4:d7:a4:32:19:ab:de:3a:9a:30:49:a5:3a:b7:10:d6:62:68:
0a:d2:6a:dc:22:37:fc:e3:3b:e2:56:48:ea:fb:d5:fa:1b:28:
41:a2:5c:a2:b0:b9:34:6c:ef:60:3f:81:5d:29:4d:05:54:17:
81:b8:01:70:5b:be:f5:f6:41:93:45:b4:e9:bb:73:3e:cd:27:
b3:ad:5c:75:2a:4c:96:12:5f:af:c0:27:72:b6:b7:45:de:dc:
32:7f:3c:c5:04:c7:18:09:dc:e0:b4:76:00:57:1e:55:fe:bf:
ae:de:47:92:f5:b7:45:72:72:07:6b:81:93:d4:e3:4b:d2:be:
0d:ae:ee:6a:8b:5a:82:23:12:76:44:2d:25:c4:09:52:dd:3f:
f3:59:fa:94:d2:8f:2f:85:e6:5d:dd:1f:d4:e5:f0:d8:4b:d7:
4a:43:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:09 2026 by rpki-client