Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: iEP+CPYH9pkLgaOwvjjDLo6KvRI5W2FUm4WHNM2XVR4=
Subject key identifier: A7:25:73:66:92:53:D1:A1:2A:55:94:61:76:2E:1E:D2:5E:C8:54:63
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019CAC46FE25D56496CAAB3A199202BB6506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1359
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: TQkor/xVGMsv+lyhY8ylKAqR3NFohy32873Bgu/dO1w=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fe:25:d5:64:96:ca:ab:3a:19:92:02:bb:65:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=a72573669253d1a12a559461762e1ed25ec85463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:dc:d1:33:8b:e8:f0:4d:13:f2:00:38:d8:
33:78:47:ad:6c:aa:8a:3e:0a:86:fd:12:0b:2c:12:
cd:11:74:09:41:58:62:83:a3:fd:48:03:40:bf:f3:
ae:36:17:b3:63:a1:80:43:f9:60:8d:f7:c0:dc:12:
dc:ae:6b:32:53:11:b9:f1:e4:06:ad:7e:ff:41:24:
be:19:65:25:d9:ef:5c:8b:58:fa:3d:9b:2b:44:28:
92:b0:33:6e:56:3c:61:51:64:0e:01:e9:3d:5a:b0:
d6:d2:04:92:00:b7:d1:ea:9c:06:20:df:4d:6b:4c:
fc:14:77:19:af:50:07:ee:80:36:4c:27:83:c4:13:
22:7b:5e:c3:b6:1d:fd:7c:c0:35:cd:4f:82:d7:d0:
a7:9a:f8:58:70:2d:51:3a:f2:a6:46:91:e4:0f:f4:
e1:c7:65:cf:06:99:b4:5b:f0:b9:55:02:51:77:b0:
4a:de:3d:5d:2c:7d:60:c3:8a:d7:d8:d8:0d:a7:00:
d8:ab:e2:64:ec:bc:bf:cd:6b:0a:be:e3:f4:6b:54:
4b:df:d7:97:f6:b5:52:ad:b8:00:54:f9:47:26:a3:
46:af:bc:24:1e:46:e9:ea:81:fd:9d:35:8c:b9:81:
6c:5f:7e:68:ca:77:7a:65:b5:75:67:9e:d2:e0:12:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:73:66:92:53:D1:A1:2A:55:94:61:76:2E:1E:D2:5E:C8:54:63
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:89:82:4a:11:d7:a0:13:5c:9e:45:38:5c:95:8b:c7:85:e0:
30:fd:65:fd:21:d2:b2:e5:81:df:91:27:d4:7b:96:9a:5b:f4:
3b:be:a8:7c:72:df:63:dc:c0:2e:ea:dc:6d:a3:52:68:1b:4e:
d5:8c:f8:54:16:1e:bb:d9:4f:4a:68:da:32:26:d6:ba:6e:43:
f1:27:79:a6:d2:e7:70:13:aa:6f:e2:6a:46:52:6f:bf:ab:05:
30:b4:9b:9d:0d:fd:6f:65:42:e0:3a:02:8c:88:b2:8d:cb:6f:
7d:81:1b:de:0c:73:d0:aa:f7:f7:a2:fa:a5:49:1d:32:fc:83:
75:eb:68:64:5a:5c:da:49:70:93:af:18:e1:49:71:11:56:8b:
2e:c6:cf:eb:75:31:17:e9:05:b3:60:9d:dd:d5:dd:44:46:d2:
1a:10:57:83:a0:cd:f2:19:c3:94:a4:7c:13:6d:4a:8f:8d:01:
ae:2c:d3:de:80:58:4c:c7:18:71:db:77:dc:9b:c0:6a:a7:29:
1a:7c:55:49:74:40:b0:a5:dc:18:08:0a:ba:91:aa:ce:1e:82:
54:93:1f:aa:3a:a9:84:8a:cd:2d:3a:74:f1:ec:87:a1:e4:cf:
cc:8d:22:ab:09:50:37:c9:f0:9e:38:a3:b3:b9:21:de:87:6a:
34:73:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:33 2026 by rpki-client