Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: GYMh20DSAaSwsqoW3HsOKFceesy6vItEVaTwaCSEv8M=
Subject key identifier: B3:82:E8:FF:E1:17:D2:50:09:08:CF:45:AA:3C:2B:09:35:04:69:35
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019CAAC62230E795E35FA5D521A0AA954EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: fiIHCH1RRO7kWoyM6v+HdlgEKzzMsw2XBL5xpsArw+g=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:22:30:e7:95:e3:5f:a5:d5:21:a0:aa:95:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=b382e8ffe117d2500908cf45aa3c2b0935046935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:1a:51:84:1d:ed:81:92:cf:a3:86:18:18:
54:7f:21:0b:fa:04:37:7c:fb:01:31:6f:30:3a:8b:
2e:de:8f:42:ee:b0:a3:1d:10:5f:cb:e3:09:46:ad:
cf:f0:4a:7e:cf:c0:91:74:ab:7f:ad:cb:09:f4:a7:
30:2a:2f:3e:56:45:68:62:eb:6a:8d:03:1d:1f:98:
4e:2b:9f:85:9f:1f:ff:82:f7:06:a9:92:f8:45:91:
29:1d:93:9d:77:c0:27:bb:42:34:ca:f6:b2:50:a8:
68:57:16:81:7a:9d:d6:d9:f4:a0:c6:b0:fe:d8:51:
96:63:8f:71:03:f9:de:7a:39:84:2b:ff:a2:b0:54:
56:90:b2:6d:79:80:6f:39:e3:06:e1:46:90:81:b9:
e6:7a:e2:00:9a:5d:83:11:f2:cf:e2:8c:36:af:66:
43:09:be:30:d8:ea:42:c4:7d:72:48:27:c4:d4:2e:
3f:ec:26:54:e1:4d:93:45:9b:96:bf:7a:b9:62:5c:
b6:cf:10:1a:be:84:7d:84:e8:f4:94:a1:78:f3:13:
e1:6c:26:03:5d:c9:ed:1f:ba:c0:b2:ad:8a:5a:d8:
64:b2:1d:6f:c2:1a:15:e9:b6:98:43:4d:41:23:d5:
d4:74:2d:81:44:1a:cc:8e:be:f7:69:7d:1d:67:1d:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:E8:FF:E1:17:D2:50:09:08:CF:45:AA:3C:2B:09:35:04:69:35
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7a:f9:9d:a7:a7:39:2b:8f:4d:51:b5:e2:29:43:9b:74:1e:
17:8f:1a:95:25:b2:bb:42:4c:45:b6:52:0a:d5:81:30:e2:67:
a8:60:a5:7a:8d:23:53:28:44:c3:3d:8b:1f:38:19:ed:c9:b9:
ce:35:1c:b9:68:0b:8f:4d:2c:f4:b6:68:29:fc:fd:45:a5:62:
9a:5c:26:08:48:c4:77:b8:46:17:fe:9f:05:17:7c:20:fe:17:
1c:bf:f8:da:2a:b4:98:11:b2:a4:24:2c:c8:05:a1:00:de:35:
c8:f4:ee:22:4e:71:e1:21:89:53:d6:2c:29:78:cb:dd:dc:06:
64:1f:4e:41:d7:45:50:f2:8d:4f:1b:06:44:7b:d7:a4:92:9e:
66:1a:a4:60:49:0e:dd:db:17:6b:5d:dc:27:3b:ed:16:4c:8d:
03:f9:ea:a9:a2:ec:67:0a:a0:a1:16:26:ae:f4:47:62:ed:a6:
cc:5a:fe:d1:31:2e:34:a8:f1:e9:6e:47:1c:c2:ad:8a:3d:6f:
98:56:42:f4:76:c6:96:3f:c1:bf:14:03:9b:cb:cb:1d:a9:10:
5b:4f:1a:b9:c5:82:63:c4:10:18:59:e7:d5:45:83:ff:35:a7:
9a:d8:a4:53:ed:7d:8d:a7:75:73:1d:0c:89:d2:db:a5:ea:0e:
bd:7f:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:27 2026 by rpki-client