Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: 5isDBol7LoIB7yGAJXk4QQScJmgcYSxGVCSte3+uRwA=
Subject key identifier: A4:29:5C:E3:E3:9A:A6:A5:FD:24:FF:29:61:6A:03:8D:AE:3F:5A:1A
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019CAC46A5ECE5C08ECCFB817CE8E02E240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 02:00:36 +0000
Manifest this update: Mon 02 Mar 2026 02:00:36 +0000
Manifest next update: Tue 03 Mar 2026 02:00:36 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: zCuDGVUHaFHFgKzPJJykqv6J1BV9ShTdw9/ESJRw/RE=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a5:ec:e5:c0:8e:cc:fb:81:7c:e8:e0:2e:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Mar 2 02:00:36 2026 GMT
Not After : Mar 3 02:00:36 2026 GMT
Subject: CN=a4295ce3e39aa6a5fd24ff29616a038dae3f5a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:bd:a6:d8:aa:f3:d5:2b:94:6b:7d:14:92:
c2:1b:97:31:98:ae:a2:22:fe:b6:6f:b3:f5:a4:75:
3c:23:86:c3:74:1c:b9:95:fa:d1:43:29:22:8e:af:
f5:33:73:b0:43:8c:f6:50:c3:c6:a7:d7:e8:03:c2:
82:4d:b4:8d:9a:6c:57:1d:0c:68:f4:74:09:73:f3:
77:72:2c:7e:a4:84:00:44:2c:e1:f3:a4:11:62:e6:
cd:ce:b8:a6:4a:2c:61:14:68:f4:f2:ed:3e:0e:37:
49:2d:36:8c:f8:7d:c8:00:09:7f:6d:f5:4f:85:e1:
8e:bf:7e:2b:64:d5:d5:07:f7:2a:7a:41:73:11:71:
2f:b7:72:dd:a2:89:94:38:a5:e0:33:1d:16:e4:83:
ff:3a:b3:5f:48:67:7a:04:e1:f5:6a:db:1b:54:96:
fd:19:f0:37:86:b4:94:fe:08:90:38:39:14:bb:15:
cf:44:b6:6f:33:f4:80:99:a2:4a:c7:f0:5b:30:ff:
c8:31:db:03:d7:b8:7b:07:2b:a8:8b:aa:c0:d4:fa:
b3:40:66:59:1a:30:49:28:01:19:54:ed:3f:55:a1:
31:84:2c:57:75:17:a4:9e:e1:cd:ca:86:ed:cb:a5:
7a:2b:5a:53:fc:15:34:70:79:0f:83:66:34:2e:db:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:5C:E3:E3:9A:A6:A5:FD:24:FF:29:61:6A:03:8D:AE:3F:5A:1A
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dd:89:a3:fe:79:05:cd:2b:ab:f5:63:f7:f9:d1:65:ec:1b:
1b:73:39:22:dc:4f:b3:22:71:67:53:97:cd:d3:4a:2b:20:5a:
74:af:83:e5:5a:b4:8b:7b:e3:86:66:36:4b:e8:ba:02:f3:7d:
15:9a:c0:e0:2b:3e:43:de:ba:71:94:02:91:89:74:a5:a3:35:
92:ef:93:2e:5b:55:15:42:68:bc:6b:c9:1f:70:7a:18:2d:ae:
a9:67:10:6c:83:24:a4:55:d4:d6:ff:41:02:c5:e8:2e:08:c9:
b8:ca:f2:ec:f6:af:9b:7c:9a:f5:20:ea:2d:99:68:69:91:12:
e0:c2:b3:0b:0f:8c:f0:11:8f:c4:eb:b1:b4:fb:51:5a:1c:0a:
e9:d6:24:ca:bc:61:58:c4:55:d4:06:da:9d:81:46:e9:92:0f:
55:5c:02:32:ff:89:4a:25:20:fb:de:2b:83:d3:4a:bf:8c:ad:
5b:14:38:91:d4:0d:15:98:5d:c7:65:36:03:65:58:6c:bb:47:
a6:66:c4:1b:df:2f:15:63:e2:d7:25:b7:c5:b9:b0:73:6a:e6:
4c:ab:66:d2:a7:d6:0e:c9:8b:d1:c6:01:0b:fd:63:5f:fc:cf:
e7:b7:34:aa:31:d5:ac:a5:3f:5b:df:2b:d6:51:75:83:b5:2c:
35:4c:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:08 2026 by rpki-client