Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 5JBKW+a+9YFYTawQKsvUe2VX8O8Uisfx4YvGmshH3pU=
Subject key identifier: FC:E6:FE:14:24:C9:5A:09:94:AA:58:01:A3:B9:E9:71:08:5B:CC:30
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019CAC46E9A87D0439FADCEB145D204F82BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 134E
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: 6RRd9nfOzKdgIzPkp//5PM4+bUQgHgFrmnxDZY4Daz0=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e9:a8:7d:04:39:fa:dc:eb:14:5d:20:4f:82:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=fce6fe1424c95a0994aa5801a3b9e971085bcc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:6b:24:fa:1b:9d:4c:e9:f9:50:52:62:fa:
18:2c:29:15:63:b1:8a:98:b2:ce:7e:11:6f:55:b2:
9a:1e:51:71:c0:04:21:e9:09:8b:cc:ad:c9:c6:27:
13:bb:33:25:97:e4:3b:a3:78:6c:1e:be:a7:8a:79:
75:ee:c6:90:09:f5:a5:23:47:ac:65:dd:54:94:3c:
94:76:1f:48:38:37:52:b4:a2:1d:53:95:56:6f:8b:
50:5a:5c:a8:d1:3a:13:c0:c7:dc:49:32:97:62:01:
7d:8b:b3:21:f0:17:47:53:73:b9:33:6e:bc:68:c0:
d6:73:e4:a4:61:4a:18:17:02:06:18:24:d2:cc:09:
5a:2b:d8:e6:e3:60:3a:58:c7:9a:a8:dd:d6:e2:7b:
a1:59:1f:ad:f9:cd:66:ee:88:36:cb:e9:4b:4c:79:
9b:d0:e7:14:45:57:79:b8:fe:7c:1b:c9:4e:d4:be:
5e:08:f2:f8:2f:33:f1:52:55:8c:1e:4f:4d:5b:94:
83:f7:5c:4f:d9:ed:30:97:bd:49:50:e4:ab:b5:9f:
3a:69:fa:23:f7:e2:e5:06:1a:e8:9d:29:b2:03:b5:
51:5d:f6:39:3a:24:04:d9:8b:a7:b3:ae:c9:1b:5e:
fb:7f:1d:e8:21:9d:90:f2:a6:03:a5:7e:ef:4f:23:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E6:FE:14:24:C9:5A:09:94:AA:58:01:A3:B9:E9:71:08:5B:CC:30
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:86:07:1b:65:56:7f:47:29:ef:6c:b2:2e:3f:d0:a5:ab:
ea:e4:eb:86:8f:f2:dc:b0:74:a7:f1:a5:41:cb:09:30:7e:e5:
23:3e:82:c4:27:73:0b:0f:cd:18:72:f7:57:23:63:2c:ae:41:
bb:68:7b:e6:4d:ed:8f:6a:e1:ef:c4:e7:b8:db:94:cb:cd:e7:
0b:ad:bf:24:b6:f4:fe:d5:9a:ee:2b:5a:a6:73:8e:c2:0b:e6:
9f:c4:7a:ff:6a:e3:5f:0c:29:4e:e1:f2:3f:6d:ea:31:e8:a9:
94:04:71:d5:9c:77:5f:f2:f0:72:b6:8e:0a:e2:76:1b:51:ee:
b9:5d:ab:16:de:f1:9c:13:07:67:f3:31:85:b7:f2:94:05:99:
71:02:b9:f3:4e:81:c1:03:e4:6e:da:a6:ee:9c:a6:e3:2e:8f:
dd:b6:4b:2d:99:b3:4d:0a:1a:09:2e:96:a1:ee:11:f1:ae:30:
83:1b:4a:79:0b:c2:cd:68:8d:5c:5b:fa:d2:e6:f0:2b:b3:a4:
aa:62:4b:b7:99:2d:4a:bd:4a:d5:f8:7a:4e:11:eb:91:95:81:
a7:ef:7c:f8:8c:f5:2c:41:28:e0:40:9e:d2:d5:f9:b0:72:6a:
49:9a:17:10:dc:ab:4a:b8:bb:d4:e7:d1:97:2f:08:bc:7d:26:
d1:c2:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:45 2026 by rpki-client