Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: dXuYmKjmsaoj2MHYOFESIc4rhKWPSxcEu4sHOzlN++U=
Subject key identifier: EB:94:92:BE:1C:35:3E:D7:7A:FF:66:64:8D:BE:E2:D7:CA:AB:18:E1
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019CAF481067D728F2153CB614262D2B7CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 03EB
Signing time: Mon 02 Mar 2026 16:01:01 +0000
Manifest this update: Mon 02 Mar 2026 16:01:01 +0000
Manifest next update: Tue 03 Mar 2026 16:01:01 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: KDl3wxBnpM+5Q4uFVMpN23QigGplPrWgXLR3QlGxCII=)
2: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
3: epxl9L9HWnrGUI5XuexvyGVngTU.roa (hash: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:10:67:d7:28:f2:15:3c:b6:14:26:2d:2b:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Mar 2 16:01:01 2026 GMT
Not After : Mar 3 16:01:01 2026 GMT
Subject: CN=eb9492be1c353ed77aff66648dbee2d7caab18e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:92:fd:10:8c:da:3e:af:65:51:46:0a:6a:
9e:61:09:37:25:60:e1:25:0f:24:73:e8:b7:5f:09:
d6:29:23:bc:38:14:75:86:69:2c:d5:cc:04:eb:94:
5a:f0:0d:fa:c5:7a:e5:d1:ae:0c:4d:50:01:c6:6b:
77:db:0a:8a:b2:23:d5:f1:1c:ec:b7:d6:b4:e2:bc:
f7:e6:4d:8e:79:37:f3:af:fe:eb:bc:18:e5:4c:98:
40:d3:0a:d9:cb:23:79:79:25:48:c5:f0:ca:02:11:
19:56:6c:81:a1:a8:f7:db:d7:9b:81:6c:d5:58:b7:
59:99:5a:5d:bf:e4:80:8c:8a:01:36:b7:8c:11:02:
f0:08:6e:cc:84:30:3a:a1:be:a7:13:6f:b9:81:2d:
89:32:3f:41:b9:a1:e5:00:e7:ad:9d:21:3a:af:c9:
16:b9:e9:47:9b:6d:18:7a:fe:8e:d5:5c:0a:ad:e4:
9a:97:b0:a3:87:59:75:63:12:0d:ad:9d:e4:0f:34:
ec:d3:db:58:48:6e:53:50:79:ff:de:c0:a7:93:77:
37:76:8f:61:a6:f1:80:46:5c:6e:dc:7f:6c:d2:81:
d0:d7:cf:25:67:9b:d9:a0:c0:9a:d3:f4:b4:7b:f1:
d2:18:85:76:e4:70:e6:c8:f3:b9:17:c2:d0:90:ae:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:92:BE:1C:35:3E:D7:7A:FF:66:64:8D:BE:E2:D7:CA:AB:18:E1
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:ce:f2:2c:51:fc:95:e0:17:16:5a:6d:3f:42:07:c7:24:
2f:6c:d3:b4:6b:05:8e:d5:a1:6f:39:00:f1:41:d6:3e:b6:eb:
9b:1d:76:7b:e2:d1:02:f2:84:b4:03:db:a1:27:43:9d:5f:1d:
1a:e9:3d:8e:9c:fe:eb:a3:b5:29:42:5e:15:69:db:e5:54:a7:
7a:39:c9:a3:19:1f:56:eb:7b:12:f4:a1:32:ee:44:39:4c:8e:
e0:c0:b8:9d:56:c1:f0:67:bf:18:f0:a9:1f:7b:b2:0e:32:97:
84:ed:86:38:3d:a9:6e:b4:5f:df:94:c9:77:c0:a4:aa:46:89:
20:20:93:be:7b:3c:5d:cf:a7:1b:64:0b:9a:58:16:01:fa:f9:
98:5e:6d:ca:93:2f:2a:b4:0c:c1:d9:7a:00:5a:ff:e1:78:c5:
37:41:cb:69:15:e8:c7:6c:e9:78:87:d6:62:0e:85:53:e3:fe:
1a:e3:8a:45:7c:a3:ad:92:c0:a8:53:55:11:4e:34:26:ff:87:
6d:ba:93:a3:f7:83:70:f4:93:08:b8:86:22:a6:68:a9:f4:10:
94:05:fe:31:72:47:48:76:48:46:e2:f3:b0:67:23:37:19:ad:
bf:5d:c3:cb:d4:85:17:22:3c:31:b0:8f:d1:a7:0f:83:35:1f:
35:1e:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:22 2026 by rpki-client