Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: +LWIVIt45MefhHHtZGGHcVcBL4b+eZNHxFNZCPfzHR4=
Subject key identifier: D3:21:90:F5:E8:C9:5C:16:77:B5:E2:D8:A9:10:C5:21:9B:1D:2C:20
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019CAA21B0DDF424846E490182EBE0B1AFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 151C
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: bx+Kgoz5h29xtneibuTsJSXVpEUYwr0xBJcxajp1AIc=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b0:dd:f4:24:84:6e:49:01:82:eb:e0:b1:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=d32190f5e8c95c1677b5e2d8a910c5219b1d2c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:74:c5:0a:5a:d5:f6:b5:46:08:eb:a5:63:
44:31:10:f1:a6:01:e0:a9:cb:f2:14:85:93:ea:e5:
ed:df:5c:e1:96:ca:be:44:6b:58:1e:9b:27:42:5a:
73:c1:f2:b7:8c:1a:f1:c2:ab:b1:e4:ee:91:8e:72:
0b:90:ad:b4:c4:be:46:dc:8f:26:44:00:17:e5:69:
4f:02:58:75:59:c2:da:8d:1a:30:75:25:84:06:25:
e9:c0:5b:be:8d:a8:11:5e:61:25:34:ce:de:99:cd:
17:8c:3a:fc:e2:5a:16:92:1f:ed:48:3f:1f:b8:69:
ed:74:aa:1b:70:2b:ec:22:38:d5:8a:b2:c1:44:b0:
b9:02:ab:fc:87:f4:73:ea:bc:8f:4a:ec:49:ce:e8:
58:15:81:ca:23:57:c8:4d:f8:23:d5:5e:7b:7e:ee:
04:5a:5a:db:64:b7:15:d5:7b:97:69:1a:cf:b6:83:
49:23:ec:30:64:f8:90:46:49:02:78:53:c6:0a:13:
ce:e8:64:a2:c7:31:3c:59:08:0b:bb:a7:fe:58:f1:
19:f4:ac:57:49:a1:44:30:e4:76:d8:65:20:95:40:
a8:35:58:f8:4b:5d:13:b6:31:d6:5c:0a:50:7c:8d:
f2:fe:89:8e:b6:7e:a3:d7:2a:2c:63:53:b0:f9:04:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:90:F5:E8:C9:5C:16:77:B5:E2:D8:A9:10:C5:21:9B:1D:2C:20
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:26:71:68:9d:1c:e0:83:5e:62:72:c4:b8:1b:c8:a5:7a:7d:
3e:54:5f:a4:de:9f:0b:6c:16:27:ea:f2:b1:1c:6b:e9:4e:d5:
82:5e:79:d4:d0:15:51:00:83:b4:f0:8b:a9:30:27:8f:43:0a:
5e:87:78:e0:3b:de:f1:17:0e:dc:3d:86:98:be:60:4c:0e:d7:
bb:57:c0:7a:18:68:37:60:c6:6d:25:45:59:54:05:48:9f:2c:
fd:50:bc:50:f7:98:75:db:b9:44:b1:77:84:22:31:9d:0f:04:
f4:70:1b:e7:e2:9d:99:40:67:02:98:df:aa:71:07:55:9a:d4:
1c:8b:77:cd:d4:03:a4:d3:48:47:a5:72:23:be:6b:6c:2e:3f:
73:d0:c0:2a:ed:df:2c:3f:f0:35:f4:bb:37:31:ed:83:6e:d3:
12:fd:dd:f7:88:e1:b2:75:d2:c1:e0:eb:c3:98:60:ac:ea:67:
5a:22:9c:c0:c6:c5:f5:bc:19:af:3f:53:c2:c6:5a:54:ab:b8:
9c:b3:d3:80:f4:b1:ef:53:33:31:04:56:b7:1a:61:4e:84:60:
d5:3a:5d:d7:37:59:ff:aa:e9:3a:d4:dd:a4:62:41:5e:6d:13:
53:7d:d2:0f:ba:d0:6b:70:52:a8:e9:24:a1:29:96:0e:60:1f:
56:ea:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:16 2026 by rpki-client