Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: 6sVx07OUusH+lgx3fpY17aJ7Ui/8Gy9KRJ0QRbdCOC0=
Subject key identifier: 9F:7A:4C:19:A7:81:A9:F7:96:D1:21:47:6D:58:33:A0:0B:98:1D:A3
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019CB024198C9AB0F422A376B6A74095E20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 135B
Signing time: Mon 02 Mar 2026 20:01:21 +0000
Manifest this update: Mon 02 Mar 2026 20:01:21 +0000
Manifest next update: Tue 03 Mar 2026 20:01:21 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: WTg64/vZ1d4PLRhLxmxgStgSC9gw2lwi7gwGuY8QRwk=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:19:8c:9a:b0:f4:22:a3:76:b6:a7:40:95:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Mar 2 20:01:21 2026 GMT
Not After : Mar 3 20:01:21 2026 GMT
Subject: CN=9f7a4c19a781a9f796d121476d5833a00b981da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:e9:37:12:26:2b:f2:c5:15:3a:c6:68:90:
0e:fe:34:39:e4:3c:fc:00:62:65:58:cf:09:b5:e7:
6f:fc:e8:02:81:b0:10:c9:33:60:df:9e:dd:1e:61:
b8:f6:98:ae:33:31:89:0a:0a:7f:18:47:9d:69:cf:
0a:f7:86:7f:0a:6d:4a:c2:cf:ce:72:2c:e5:73:21:
35:4f:51:68:ff:3d:2f:b7:e1:81:8d:4c:92:e3:f3:
f2:77:db:3c:e3:cf:4c:4d:58:c9:ca:35:cd:d7:0c:
8a:fb:da:53:39:a9:b1:f4:a1:e1:0e:dd:10:16:91:
91:28:85:9d:db:d1:aa:f2:6d:c5:9b:31:53:03:0a:
43:4b:8b:99:8a:13:98:c6:6e:07:db:77:d2:b9:e5:
f0:0f:df:c4:1a:c4:4e:fe:07:8a:87:6a:88:97:31:
b9:7e:b1:91:e9:ba:93:b7:47:0d:39:29:44:d3:06:
f5:e0:49:02:b1:06:cf:a8:85:46:d9:9b:fb:d2:41:
c0:8f:e3:68:c7:45:a5:00:d0:4c:e5:22:56:92:2d:
0e:ca:6a:05:58:5e:19:ae:2a:e4:40:43:7f:34:47:
09:1b:8f:14:b8:23:23:81:03:c7:b5:13:0e:5e:1e:
78:41:64:1b:62:27:ae:c9:e9:78:a2:39:0e:4c:95:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:4C:19:A7:81:A9:F7:96:D1:21:47:6D:58:33:A0:0B:98:1D:A3
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:b6:d7:e1:e1:a6:18:4a:65:cd:5b:4a:f8:c9:ef:6c:bc:
c1:93:bc:e9:a4:cb:98:49:18:e9:0f:72:b3:85:42:29:89:9c:
6d:dd:dd:b8:f9:b9:39:a5:35:2e:1e:aa:af:5a:87:94:f6:61:
25:84:43:86:b7:6e:8c:fb:79:48:98:c5:19:7a:2d:f1:db:e8:
22:20:b4:af:1e:1c:a3:eb:87:27:c9:d5:bd:23:0a:2a:eb:f2:
a2:17:5b:31:84:94:63:53:0b:89:b3:d9:65:11:d9:70:6b:8a:
4e:66:79:4e:f2:79:9a:d1:b9:98:5e:14:35:b6:1a:d4:33:c4:
7c:63:02:24:0d:10:cf:a4:bf:a2:be:df:c3:7c:61:ad:78:be:
2f:fa:89:5e:57:7f:cc:cf:09:35:af:04:60:11:91:27:24:5c:
84:16:49:d6:6f:9c:10:62:1b:ff:85:ce:77:bb:05:ac:d6:d7:
de:75:50:a1:e2:b4:a9:6e:c3:81:e9:ec:27:29:2f:6b:6c:71:
f7:1d:62:b7:69:5d:4e:a2:a7:75:13:cb:a2:67:99:00:1f:63:
69:52:56:7d:c7:a7:75:45:90:ae:61:16:b0:d5:30:0b:2d:43:
3f:a3:cf:07:c5:87:47:dc:8b:21:7d:c9:aa:fe:35:34:3a:3b:
4d:ea:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:07 2026 by rpki-client