Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: rkpV0sQG9uNvaFOwW65usOSQ4vGHFByQMcsMTmsa+Tg=
Subject key identifier: A1:0F:78:EA:D4:96:D7:E1:58:82:AE:95:C9:05:73:9B:10:DB:C7:1E
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 019CAA21377839FCA0BBDA1F640086007792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0CB1
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: goULN0NQRyrpJPZLCAJaSizlUB7VaG3V3DFYHoAG0rE=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:37:78:39:fc:a0:bb:da:1f:64:00:86:00:77:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=a10f78ead496d7e15882ae95c905739b10dbc71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:ef:23:a1:e6:bb:5f:5f:ff:a6:66:db:4a:
a0:81:02:93:0c:fd:29:96:ce:4a:bf:8d:e6:63:f1:
69:15:0b:48:6d:a1:c7:7e:99:d0:d9:73:24:14:6b:
e6:7f:de:2e:d1:7d:f6:d5:33:70:18:3e:10:d4:0f:
33:d3:a7:57:6f:7d:53:af:d2:b2:8f:4f:46:b9:80:
6c:8d:3d:4b:dc:ca:ac:04:c4:fb:11:54:09:6b:d2:
d8:54:22:08:21:93:d6:24:ef:f5:2f:bc:0d:34:0e:
ca:31:0c:13:8b:7f:13:81:97:b7:cc:3b:dd:1c:51:
09:65:ca:1c:9d:18:e6:4c:a7:56:27:c1:4e:12:61:
79:e0:ae:01:55:22:bd:5a:f0:61:19:3e:23:d5:16:
0a:24:d3:95:6b:57:21:c8:c8:d7:0e:bf:85:fe:6c:
58:df:c4:de:61:74:8a:97:3e:fb:50:5d:8b:a2:74:
fb:bf:c3:4c:02:98:82:52:35:14:ea:6c:36:e1:95:
ae:87:2f:ac:64:46:f9:a8:f4:f6:7e:fe:ce:ab:42:
9f:25:36:87:7b:1d:d0:eb:1a:06:7e:3f:5f:11:ea:
e2:00:d5:76:5c:28:10:51:43:c8:e9:09:15:90:c0:
cf:ca:7d:ea:a3:2d:13:af:af:94:79:a4:4e:26:cd:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0F:78:EA:D4:96:D7:E1:58:82:AE:95:C9:05:73:9B:10:DB:C7:1E
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:49:65:e9:03:da:77:b5:d5:21:84:77:08:8e:78:09:9d:68:
c9:91:5c:b3:a5:5e:bd:a2:3a:ae:7f:23:b8:38:da:20:76:5b:
00:98:3f:ae:3f:e4:bf:50:c9:27:94:70:63:b8:93:46:b8:24:
fe:d7:27:2b:81:79:0b:1d:5a:3b:27:51:63:72:4b:6e:36:42:
ad:4f:d2:83:99:69:a2:32:87:5f:95:89:3a:94:4c:e8:b8:4f:
d3:d5:7d:c6:db:be:94:c6:5a:8d:5a:f1:13:28:2a:4e:53:34:
8b:70:da:c3:b5:c1:39:30:df:60:6a:65:06:95:2d:71:09:f2:
8d:9f:d2:4f:82:e4:3a:d1:a4:05:6e:20:f1:e0:d1:ff:4e:b9:
0d:ea:f9:aa:9b:c7:bc:9c:45:00:81:9c:40:30:a3:46:fe:ad:
68:7d:c1:bb:ec:5f:9a:2c:0d:3d:be:5c:0a:16:7b:b8:8f:b8:
03:46:a4:ff:04:8e:4b:43:1a:67:30:f6:4c:a0:b2:e7:fa:d9:
75:c5:5c:eb:ab:39:cc:e5:92:61:ce:ca:b0:89:90:28:cb:91:
dd:87:4b:1c:17:03:14:ac:c9:a7:d5:39:01:7d:24:10:eb:53:
8d:b6:66:50:59:b9:4a:f2:04:f0:ed:fd:e7:5f:85:75:94:38:
65:6c:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:34 2026 by rpki-client