Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: XvgoJyqyGtr7/k0Ks2Amk3zg8886gM2fxlcJckoP0YA=
Subject key identifier: 28:EF:20:AC:C7:5B:44:BB:C5:B7:F7:AE:26:1E:D7:48:80:2E:AC:52
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019CAD223A08ECAD5F23A96934CE08DCC2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:27 +0000
Manifest this update: Mon 02 Mar 2026 06:00:27 +0000
Manifest next update: Tue 03 Mar 2026 06:00:27 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: cIVpIfEMWFltDr8Nfx4z2yLvfAcG0B4GCmY1tYbIvj4=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3a:08:ec:ad:5f:23:a9:69:34:ce:08:dc:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Mar 2 06:00:27 2026 GMT
Not After : Mar 3 06:00:27 2026 GMT
Subject: CN=28ef20acc75b44bbc5b7f7ae261ed748802eac52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:80:36:ac:c6:43:c8:6e:57:c8:a7:8a:17:
47:43:fb:51:6c:8b:a5:b9:0a:1c:d4:4c:ed:0e:30:
90:84:1d:49:fd:cd:9b:3a:7a:b8:90:ae:33:ad:0e:
4d:ea:29:4f:aa:9a:53:5a:22:49:37:c0:cb:13:df:
eb:93:df:8b:d6:2a:95:1e:75:82:91:2e:7b:b9:5f:
6e:8f:0d:2f:94:9b:81:05:97:4b:c8:b2:85:cd:c9:
b0:d6:e9:c0:44:a9:0f:a9:9f:0e:96:dc:7a:73:88:
6f:51:83:97:46:72:d9:44:92:91:3e:5b:1c:fe:05:
fb:c9:f3:fa:2d:22:7d:93:4e:9f:f7:b3:74:48:c1:
33:96:47:0c:a1:ec:e8:c8:22:57:55:70:8a:61:61:
59:ab:88:7b:3c:4b:4c:7e:0e:cf:72:7f:37:78:4e:
fb:39:a0:26:e0:f4:d4:c6:b2:0d:71:88:87:89:c8:
20:da:6d:7a:ad:77:57:16:83:06:2f:d4:9a:96:8d:
ce:b7:44:15:b5:0d:35:18:f9:47:6e:6e:b2:5e:ba:
be:6b:57:a5:ab:08:d7:dd:92:65:8d:d8:3f:d9:20:
82:d7:d4:a2:cb:a8:f4:e4:27:a8:25:31:06:2b:59:
20:95:74:db:0e:23:d8:f0:3e:c8:b6:10:58:12:f6:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:20:AC:C7:5B:44:BB:C5:B7:F7:AE:26:1E:D7:48:80:2E:AC:52
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5c:d3:a7:b7:50:07:55:7d:3b:49:4c:80:5c:bb:f9:4e:72:
8e:48:3e:f5:f9:e7:1f:f6:d9:08:62:fa:c5:2f:0e:67:3e:de:
66:bd:22:d9:95:a8:4c:e7:2b:01:37:a1:f2:68:95:19:91:95:
3c:c2:92:39:98:ca:b3:8a:80:af:86:de:0a:8d:93:e5:44:1b:
05:54:56:99:00:a4:32:07:0b:80:66:86:52:d3:bd:05:3c:c5:
b9:62:68:00:48:d0:5e:9e:d3:94:61:af:81:55:84:d4:7d:56:
f2:1e:0e:47:7f:4b:90:d1:84:90:7a:48:39:68:8f:cc:e8:67:
a8:6b:ce:51:99:6d:45:b7:62:32:ac:89:9b:fc:c8:de:ba:6d:
43:1c:62:b6:41:96:ff:8c:f8:2d:dd:8e:4a:ec:a4:21:d6:fb:
81:c2:bf:7a:b7:43:94:62:ab:2d:1c:e4:bf:06:23:59:4b:2d:
c8:2d:62:e6:e8:ad:ef:0b:cd:27:c1:6e:76:34:7d:a1:c1:91:
2d:1c:cf:79:29:c2:fc:72:66:d7:be:ea:2d:7a:c5:fa:b2:7b:
49:81:e0:75:cd:9f:f8:7d:17:ee:49:ff:c4:21:ce:5a:d8:74:
04:59:6c:79:fb:71:ba:fb:ce:26:5f:66:51:56:76:55:a9:c2:
0c:e2:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:09 2026 by rpki-client