Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: g/Krxrj82qp2Jh8dB67NId34iXJrzYeKWWBEpDlsbsg=
Subject key identifier: 97:AF:A2:4A:5A:6B:06:2A:FD:68:9B:73:F3:5B:10:54:65:6F:5F:4A
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019CAB348F5838334A6E26796D643ECDF03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: 12lnu8wuA9i2FkyjvlPA3sOwUOXqkC4nCMIjEHy0UaU=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8f:58:38:33:4a:6e:26:79:6d:64:3e:cd:f0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=97afa24a5a6b062afd689b73f35b1054656f5f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:a7:ac:f8:be:fc:ce:e9:ea:79:25:34:0f:
df:04:4f:0b:c9:75:5c:5f:5b:ad:c8:f5:7b:cc:33:
40:27:23:94:4f:8e:75:c5:0c:25:b4:04:6f:d3:a3:
78:30:d9:ef:66:69:d3:1a:94:9c:82:a8:25:e4:31:
eb:d0:98:28:91:2f:ec:66:c7:36:40:01:4b:bf:72:
ee:a3:16:43:43:04:56:f8:85:b4:8e:95:bc:44:0c:
53:16:7b:7b:e3:d2:e5:1a:93:55:d8:cc:ce:28:f0:
c2:39:41:bf:60:c6:f1:b7:7f:f0:dc:6d:4a:d2:ef:
f6:71:dc:dd:b8:eb:92:a7:96:05:61:2f:a7:e9:a2:
5e:3a:b2:7b:21:d9:9e:5e:53:6b:64:6e:ad:f3:d3:
35:b9:49:65:06:10:2e:ff:d3:06:6f:c3:1a:ac:01:
9b:cb:20:0f:54:5f:d7:b0:2d:db:4e:ba:d1:58:17:
48:cf:f4:39:78:0d:7e:de:32:23:08:f2:85:27:31:
ce:43:65:b7:00:ca:6f:9d:e9:0e:a3:bd:62:db:f6:
57:da:cb:45:0f:9d:68:fa:62:3f:9b:b0:54:23:59:
d0:32:9c:21:97:61:ef:2c:82:0a:07:e5:eb:f2:e9:
b8:d1:a6:a2:ce:92:0f:61:98:aa:94:56:40:7d:c8:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:A2:4A:5A:6B:06:2A:FD:68:9B:73:F3:5B:10:54:65:6F:5F:4A
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:34:c5:1f:c8:20:e2:c6:fd:73:50:96:7d:af:00:be:03:
c1:4b:b4:57:03:09:c8:fd:c2:72:90:0f:9a:63:2a:33:be:49:
02:81:4c:ac:c8:b0:84:0e:80:30:86:9c:1b:15:cd:0f:b6:1e:
df:01:ca:05:fe:96:f3:be:e3:f5:09:7c:07:90:86:42:32:e2:
26:93:89:f8:77:ac:96:78:ef:a1:37:de:99:00:92:63:3b:4a:
27:ef:3c:7a:52:b4:2c:3e:3a:cb:60:42:7a:36:7e:3f:cb:76:
d8:e7:5c:8b:34:f4:fb:38:dd:f7:5f:a7:8e:1a:60:c8:05:57:
86:f1:af:ea:bd:be:86:62:08:1b:86:7e:10:87:4b:e8:7c:d7:
1e:b8:b3:09:87:5e:f7:a6:22:ed:f5:ef:be:56:a9:31:2e:db:
db:65:1d:46:e4:9b:f4:4c:1a:5c:aa:ca:63:f7:28:cf:9e:8f:
55:7d:38:19:68:29:42:4a:23:1c:d2:d6:ce:1d:94:28:e9:34:
f8:fe:f6:64:79:2d:b9:6b:56:46:11:f9:dd:43:70:7b:1c:e6:
d5:cc:1f:19:a6:ee:26:07:de:db:6e:83:b1:9c:51:2b:f4:50:
23:48:38:d4:19:36:0a:96:3d:7a:8b:08:19:23:9a:0e:75:a8:
a2:42:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:03 2026 by rpki-client