Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: 4irB/VHCOztnUkw1uEKpQgpt7z4rfigtEN/AYK0u/bs=
Subject key identifier: 48:D3:D3:4D:5C:F9:AC:C2:56:D6:84:88:1C:D6:47:2E:C1:42:D1:94
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019CAA591D796EABC1D123204536A71C06D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 11FA
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: ZPksMTaasEwbkK6Xk4b45eSBSUcYVfGVdX0tTLqfEgo=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1d:79:6e:ab:c1:d1:23:20:45:36:a7:1c:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=48d3d34d5cf9acc256d684881cd6472ec142d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:a7:18:ae:0c:d4:ef:57:d5:53:53:b1:ab:
9e:09:ed:9a:fc:b5:ba:9e:4b:a3:ec:f2:74:69:51:
26:5b:a6:e6:1f:cd:d1:10:8c:61:58:ca:1d:25:9c:
1a:77:92:99:03:fe:e2:79:94:7a:b0:1c:12:88:da:
aa:61:1a:33:09:7d:35:f5:96:e8:22:32:f2:51:9e:
32:05:39:95:da:42:c4:67:a4:72:b9:d5:7e:28:5b:
a3:54:b9:db:93:82:e2:f7:54:c8:9d:26:d7:f6:ba:
c4:c8:af:eb:2b:48:97:8d:a0:b4:ac:81:7b:71:23:
c5:aa:81:7e:0b:aa:98:2c:73:d6:e5:d4:1d:45:38:
6c:c7:7f:1d:41:64:1a:e8:58:37:da:95:a8:da:b3:
00:a6:e9:68:3c:f5:c4:1b:fb:43:e9:36:93:e5:a1:
ff:9f:c3:63:ba:43:f5:b1:96:34:ba:ca:39:5e:3b:
e2:0f:84:f9:18:81:c5:12:2a:07:e9:20:3a:46:dd:
50:4f:7a:b5:c4:0f:d7:44:24:56:95:b7:c1:b3:24:
b1:e3:e3:19:76:10:f6:c2:33:fc:09:e9:10:34:ad:
65:55:66:b2:33:4a:19:88:04:f5:2a:9f:55:7b:ca:
d7:05:b1:ae:ca:0f:c6:13:ab:4d:32:28:52:91:e5:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:D3:4D:5C:F9:AC:C2:56:D6:84:88:1C:D6:47:2E:C1:42:D1:94
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:98:05:5a:c6:c7:0a:22:01:08:75:67:ee:80:5c:3d:30:c9:
38:30:3e:87:6e:cf:a1:d1:05:75:fb:24:22:da:1d:7a:be:e6:
d0:2c:fd:cd:a4:8c:af:ba:3a:cc:08:e2:55:b0:20:65:c9:51:
25:82:07:9b:39:fc:f3:fb:d4:96:18:d2:48:35:5d:b9:a0:d5:
e2:1c:5b:61:ce:60:0f:d7:c2:72:b8:e3:c9:10:d7:1b:32:dc:
24:af:bd:55:ab:60:47:8f:87:ac:97:8c:b9:7a:fa:29:54:59:
00:76:71:c5:9a:97:3a:12:72:37:d6:0f:8f:bd:3f:e0:73:1e:
9e:72:a4:94:71:88:c9:bc:e2:d8:bb:fd:2e:6d:f8:2c:d9:83:
57:15:11:23:ae:3d:79:cc:2e:b5:d0:47:9c:9e:95:a4:3f:ab:
ab:d9:e4:3d:75:c1:dc:68:c2:00:f3:fc:a2:4e:50:13:b5:b8:
0b:4c:0b:f9:5a:b0:04:6d:3f:c3:05:af:b9:07:3d:26:91:cd:
b8:55:a3:d1:ca:98:15:fd:93:a7:f1:0a:a8:51:7c:a5:7e:ba:
56:a2:6f:30:ec:7a:fd:60:cb:dc:75:14:c1:8c:f0:e3:8d:08:
3f:1c:d7:f1:6a:3a:bb:6e:81:b9:e8:4a:d1:e3:f6:45:eb:5d:
aa:86:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:11 2026 by rpki-client