Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: 7dg3W17D+RtUmW+TMvV67pCxsFctF2AQeyN65HxDJVg=
Subject key identifier: BA:A6:37:B1:25:AA:22:62:8B:AB:AC:A0:39:DF:C8:2E:00:4B:46:D9
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019CAC7E5EE76881D33559DC968A2937CF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 0540
Signing time: Mon 02 Mar 2026 03:01:28 +0000
Manifest this update: Mon 02 Mar 2026 03:01:28 +0000
Manifest next update: Tue 03 Mar 2026 03:01:28 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: nO3/KN1cfGpQI0sT6wkEsPO02XcWcDxJCMoiutd8V0s=)
2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:5e:e7:68:81:d3:35:59:dc:96:8a:29:37:cf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Mar 2 03:01:28 2026 GMT
Not After : Mar 3 03:01:28 2026 GMT
Subject: CN=baa637b125aa22628babaca039dfc82e004b46d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:d5:ca:3b:95:e1:9d:51:c7:73:c4:74:52:
59:90:44:5d:3a:5b:c7:11:67:cd:ae:ce:da:39:07:
da:a5:dc:da:b0:78:02:74:fa:41:43:7b:a9:e2:41:
bd:3b:5b:9f:ad:8e:75:04:4b:f6:0b:d6:8a:30:64:
fe:00:b7:b6:0f:50:fe:76:30:f4:16:9f:b4:f6:53:
c8:f8:b5:42:25:0f:b2:ad:df:1e:d4:d2:58:30:50:
27:b3:a8:db:bc:73:7c:29:39:cd:00:4f:15:8b:f1:
d4:8f:fd:ec:e8:c2:8d:e0:9f:cb:09:aa:b1:2a:22:
84:11:de:02:db:2d:b8:6e:b6:b1:d0:8a:9c:e1:3a:
71:b1:da:d8:15:04:5d:c6:4b:81:04:47:04:e4:bd:
f5:05:c1:70:bc:8c:74:d9:94:7c:74:26:78:37:97:
9c:87:3f:0e:34:29:9d:44:d4:dc:7c:f7:3e:5a:28:
35:1a:36:4b:26:10:3b:4f:5e:76:72:9a:89:f6:06:
7c:60:bc:06:82:25:d5:b0:9f:7e:8c:71:f9:a5:d8:
c6:5c:c9:4f:a5:76:b3:b5:da:63:7f:5b:72:93:90:
9c:35:ad:55:09:22:a7:77:13:1d:54:92:c8:8c:a9:
46:2a:c1:97:ca:fc:72:4f:7a:08:a9:89:9e:ee:7e:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:37:B1:25:AA:22:62:8B:AB:AC:A0:39:DF:C8:2E:00:4B:46:D9
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:72:87:83:b3:4f:c0:86:49:3f:c0:c8:ad:96:ab:20:2c:25:
6c:d5:fc:ed:0e:20:7e:95:4b:13:9b:da:10:42:c8:da:ee:63:
9a:8a:7d:42:5a:64:c5:ec:f2:27:c5:25:b3:2b:ef:ef:fe:6e:
c4:20:06:6b:1b:56:69:2b:99:3b:c0:0f:74:b8:30:62:c2:b4:
f8:71:99:2a:9b:78:a9:fc:8a:04:f1:f5:f0:6b:09:39:9c:87:
93:54:9b:c9:1c:cf:bd:e3:b8:83:6b:ac:c1:18:6e:f2:7b:f0:
74:57:a4:12:10:79:d1:4f:d1:0b:66:43:0c:33:ee:03:de:a9:
ba:81:e2:56:2c:05:4b:34:5e:dc:71:0f:00:1c:d2:0e:e5:5a:
40:d9:c1:1b:30:03:fd:db:fc:ac:63:1c:63:27:7d:e3:66:9c:
98:e5:ae:fa:9d:b1:62:aa:6e:0a:51:b5:91:c1:f5:75:8b:7f:
d1:47:fa:5c:18:11:4a:e2:33:24:18:3a:72:f7:e7:4a:84:86:
90:54:a3:f0:70:88:cd:5a:5c:ec:c0:9d:7c:52:46:b9:5f:5e:
60:b2:fa:74:6a:45:69:78:44:bb:5f:f6:44:1a:2e:8b:e0:b7:
33:db:9b:26:ca:04:74:98:a4:36:bd:35:c4:65:bf:1e:73:d8:
84:e0:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:33 2026 by rpki-client