Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: IZiWWZQJKWTttHaP1P2BdnXmfkUPacDavKMM+dWUTF4=
Subject key identifier: 38:3D:6A:51:12:D9:2D:28:7B:C8:14:38:B9:8C:EE:69:2A:C0:D5:25
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019CAB6B12F379112C4AC8E1704974CC23A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1727
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: +eHaGu4GkMkXm2Aw+TbmCcFwoQ0e3ykpVTn7kBQA70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:12:f3:79:11:2c:4a:c8:e1:70:49:74:cc:23:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=383d6a5112d92d287bc81438b98cee692ac0d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:80:e3:71:65:dd:bd:62:4f:b0:01:79:c7:
05:e5:c1:07:16:e9:f2:76:d6:08:7c:85:8b:f5:8c:
31:7f:fb:68:09:8f:5a:ea:f3:1b:ea:43:28:ec:6b:
8e:74:a1:7e:ac:ae:c9:71:79:60:db:07:a7:f8:a4:
63:3d:a4:ee:a4:9f:13:d6:f3:41:6d:0c:f9:37:64:
74:e1:5d:a1:85:0e:5b:a9:61:76:4d:53:33:b3:ad:
51:12:54:0f:19:0c:a8:ae:47:64:e0:33:2f:28:ff:
f5:10:21:53:77:73:1f:6b:69:0c:c5:31:93:2f:bb:
ea:46:a8:cf:fb:77:ad:48:b3:16:34:60:1f:23:50:
9b:4c:0f:ca:65:55:b4:ea:53:ec:4c:77:3d:1d:35:
43:d9:3f:f8:40:7b:38:a9:f9:96:b5:ac:0e:77:8a:
8a:dc:81:5f:6f:08:5c:5c:ba:fa:d4:24:91:d6:d5:
d9:5f:52:68:d1:4a:fc:f8:69:a6:68:5e:e6:3d:94:
9c:e4:08:31:f4:23:80:de:7a:3a:d1:c6:6a:ce:1a:
28:5e:89:8b:32:5f:e0:f9:6b:f6:ef:14:cf:9e:7b:
2b:88:b4:92:01:29:35:1e:89:ee:36:09:15:21:65:
5c:2d:f8:47:fd:ee:3a:fc:1e:b9:9e:d3:a3:f6:eb:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:6A:51:12:D9:2D:28:7B:C8:14:38:B9:8C:EE:69:2A:C0:D5:25
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:83:3f:21:97:9d:10:f3:bf:bb:37:28:13:6e:c4:8c:38:a7:
09:ae:06:12:f5:7f:f4:77:5b:95:fc:ba:70:90:f5:a8:5a:9c:
ba:4f:6a:a5:01:7f:e6:1e:20:67:93:d4:75:e1:3c:cf:1b:60:
96:25:39:a3:44:50:00:07:10:b2:7f:7e:72:1f:c0:d6:19:06:
59:c3:c9:75:b3:9e:d5:81:a8:90:bb:9e:93:83:fd:60:52:18:
ea:94:83:e2:85:c2:de:80:1f:c6:6d:e2:03:bf:7c:82:56:d3:
cb:68:4a:77:6f:6a:11:ab:65:ac:69:89:38:95:b6:b1:55:53:
d0:e7:96:60:3b:b7:62:26:c0:47:f4:3b:7f:fb:a5:09:c1:d8:
fe:b5:d5:b8:f1:fd:7d:fb:5d:bd:68:f4:7d:f6:08:99:3e:d9:
9d:02:00:18:a4:c8:25:4f:3f:a2:ab:b9:1a:38:db:d4:66:18:
65:91:2f:c7:fa:35:b1:62:ff:83:4d:db:a0:b1:14:93:d4:49:
a8:c1:10:82:fb:92:98:3c:d1:20:82:c8:5a:a3:19:7e:5e:f5:
d4:15:3e:ce:1e:4f:e5:7e:ed:c5:58:e9:49:ea:ba:38:d5:96:
9b:0b:af:c5:d0:79:bc:23:4b:96:59:77:e4:88:0d:0a:0e:de:
75:4d:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:13 2026 by rpki-client