Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: Q//TBLI56XB8cCqyNxizZa529RQAG6Ma+GdyiNaLF9Y=
Subject key identifier: 3F:57:62:E4:DB:9C:03:E5:11:F6:0E:E0:FC:B4:A2:59:02:34:88:99
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019CAF11276C3EBB686E2F875D6F9968BA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 15:01:02 +0000
Manifest this update: Mon 02 Mar 2026 15:01:02 +0000
Manifest next update: Tue 03 Mar 2026 15:01:02 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: MA8ZnPkSj1+forC/rMFhxO3UFuhKHnDSrkpphwhazmE=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:27:6c:3e:bb:68:6e:2f:87:5d:6f:99:68:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Mar 2 15:01:02 2026 GMT
Not After : Mar 3 15:01:02 2026 GMT
Subject: CN=3f5762e4db9c03e511f60ee0fcb4a25902348899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:0a:28:84:21:b9:08:ee:3f:1c:97:ba:87:
cb:e8:dc:2f:8e:ba:51:8d:33:0a:7b:db:ac:21:05:
52:7a:83:c9:75:ee:0f:ef:a9:6e:43:bb:82:a6:49:
62:3e:e8:ad:75:83:d5:df:4d:c4:43:5c:ad:dd:b0:
c9:48:c0:7d:08:65:54:b2:ea:11:e7:61:82:57:a7:
1b:b7:4f:45:51:77:29:5a:cc:aa:9a:a0:e3:04:18:
aa:e6:4b:bd:27:20:bc:24:dd:d5:bf:ff:ff:a6:59:
65:ff:70:74:6e:73:25:cb:24:e6:f3:5b:85:d9:91:
d0:eb:c6:ed:09:0b:b1:19:0f:ac:f4:59:dc:db:d9:
f1:42:c8:21:c1:73:f5:99:79:bf:c9:95:c6:d4:7e:
9d:25:17:4b:30:8c:99:3b:50:69:33:ce:ce:9e:1a:
56:61:20:fc:0e:1f:d3:cc:72:54:26:0c:9c:b0:b2:
4c:2d:6e:89:15:d6:bc:55:29:7b:1c:26:8a:56:62:
1d:4b:99:6b:0e:c7:0d:be:c6:41:8a:c6:6a:f6:61:
fe:04:b4:e4:5e:7e:8e:07:5c:de:52:2e:ff:b5:fe:
8e:5b:89:00:78:30:3f:73:bf:e9:0f:2a:77:67:57:
43:f7:fb:c4:89:ce:1c:ed:af:64:6c:5f:50:a2:bf:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:62:E4:DB:9C:03:E5:11:F6:0E:E0:FC:B4:A2:59:02:34:88:99
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:4a:26:2e:cc:2d:4e:c0:64:8d:d0:54:4c:fa:54:46:e0:
bd:2b:e8:b0:fc:af:34:75:38:46:3e:9c:f1:64:db:ca:35:42:
dd:47:2a:fe:be:5c:b7:68:f5:d2:df:96:a8:6c:ff:c6:2e:d4:
39:e7:fd:fc:17:2f:98:c4:ad:92:35:c8:83:57:74:76:de:c9:
85:23:08:96:f2:3c:60:45:95:57:b3:f6:02:27:f0:ba:43:66:
d1:08:e5:2c:ac:b9:c3:3f:ac:53:5d:78:d9:08:36:80:78:31:
85:03:04:6a:22:90:a1:24:ba:63:97:30:33:3e:73:85:52:df:
d8:69:05:83:c1:48:76:47:ce:35:03:25:5d:14:15:8e:a1:e5:
f0:40:b2:5c:77:d5:39:bf:08:a5:39:cc:29:3a:78:68:9f:35:
d8:8d:29:4e:ea:6a:01:1b:15:0b:1f:d5:28:87:6a:0f:51:87:
bd:e3:26:37:e4:6b:e4:fa:f7:8a:45:7f:13:8e:a0:bf:78:53:
41:8a:ba:0a:88:8d:ec:ff:dd:82:aa:02:2c:aa:98:ef:31:00:
06:4b:d5:71:51:4c:d9:25:6a:da:b9:5a:74:c4:1b:f2:4c:14:
1c:1e:03:b9:4f:91:75:34:af:0b:47:8a:bd:37:5f:5a:7d:3e:
6e:bc:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:42 2026 by rpki-client