Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: 0Cbsmyc1uxbA2zKdRONIg82Jp7Y37/XJKIF4XPl6zJw=
Subject key identifier: D1:39:A6:71:93:C3:18:61:CC:BB:FD:6E:CF:40:E3:DF:ED:9B:CC:42
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019CA9B3E968A14C92CB455A1C83E6D2DCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1856
Signing time: Sun 01 Mar 2026 14:01:06 +0000
Manifest this update: Sun 01 Mar 2026 14:01:06 +0000
Manifest next update: Mon 02 Mar 2026 14:01:06 +0000
Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: xtQ2+2qgw1Mhb2yeEZKqq7FlKAOFK8/3sV7Z+Rg2dgQ=)
2: JezjNTAfPbdlulCLBoO7mgYw2Y4.roa (hash: DSa6N96/QE2hXNxEFptm9KXCtFZ3HWg6uWKpBPavcuk=)
3: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=)
4: QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa (hash: 2V3XqNeNFd0SSJuJmBFBmno3apI+YcUhq7UgO9I7f4o=)
5: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
6: fhRyE_K269sQWrdJhqkhEA-v5ko.asa (hash: 9+eBnbSBimBu4HwMZ224XRHi7r8hcPQzKz3/KA+alHc=)
7: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
8: pPqoqszyNflAViMWi46ZOrZTdjY.roa (hash: 9ArEQlpDxpoMCJBHKPMxnNBFpsFnEVif2wzal4CkC4Y=)
9: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e9:68:a1:4c:92:cb:45:5a:1c:83:e6:d2:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Mar 1 14:01:06 2026 GMT
Not After : Mar 2 14:01:06 2026 GMT
Subject: CN=d139a67193c31861ccbbfd6ecf40e3dfed9bcc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:a1:ed:93:b9:9d:26:37:46:5b:e3:01:f0:
39:60:d8:de:1b:18:a8:a6:09:e5:46:a3:18:ef:81:
e4:aa:e9:65:c3:3e:68:e2:c1:b5:ad:ef:e0:f3:8d:
48:72:f8:cb:67:c4:63:04:34:91:e7:e7:d2:d6:36:
e9:06:13:6c:6a:37:05:d4:d0:27:a3:e8:44:ce:bf:
84:1a:65:c8:7e:4a:47:c7:14:f2:2b:cd:65:b5:58:
cf:27:8d:23:6e:7e:8e:b0:30:df:cc:1a:80:46:21:
bc:e0:96:6c:bb:43:93:bd:b4:12:b6:7c:1f:b0:a2:
d6:0e:af:be:dd:3f:76:de:de:5d:c4:80:d8:e7:e9:
53:39:fd:93:e2:5c:18:6c:43:76:2f:17:b0:e0:68:
99:f9:6a:f3:da:e8:73:62:fd:c0:8d:bf:24:ec:60:
15:bb:2c:47:dd:0c:51:08:58:c8:1f:93:bb:87:60:
c4:b7:95:b9:6b:63:39:ee:0c:22:5b:92:1e:ab:f2:
69:2c:ae:2c:2c:88:f1:5a:c5:4f:94:ce:67:91:17:
df:d4:c1:5c:10:dd:0f:50:ba:0d:57:e9:a1:a9:fd:
d2:fc:74:aa:5c:21:98:6f:01:20:33:6f:32:4a:55:
5f:9f:44:69:23:7a:31:aa:3d:e3:7e:42:b1:0f:7c:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:A6:71:93:C3:18:61:CC:BB:FD:6E:CF:40:E3:DF:ED:9B:CC:42
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:83:ec:a9:bd:6e:6e:cb:fe:7b:a4:93:50:57:1b:c8:8a:
f2:17:b4:59:31:33:6c:04:42:31:61:0e:6b:f5:e8:87:40:a3:
21:82:5f:b3:5b:0e:1c:d6:fc:2a:cb:f5:a2:4c:03:f0:b5:b0:
26:55:b0:5b:3e:5f:b6:8f:74:00:b6:d0:d2:08:4b:f0:e6:00:
f7:8e:8a:4a:ae:ba:33:8f:89:fc:ee:07:50:f2:c2:3d:09:b3:
66:da:8c:1b:5d:ac:71:84:9c:c7:6a:14:2a:c8:fd:16:e3:df:
c5:b3:8c:a6:0c:75:45:73:67:8f:aa:3d:7d:c0:06:46:6b:2a:
68:a8:a1:b6:a1:70:0c:c1:d2:63:bc:52:ff:2f:47:e7:d6:aa:
d5:1b:98:55:39:64:64:1f:d4:b4:b1:b8:d0:c0:67:90:ab:34:
d2:22:2e:18:e5:d2:d0:44:75:e3:5f:92:67:18:ac:9d:f0:1c:
14:2f:82:29:9e:b3:f7:5b:cb:2c:9d:5d:4a:78:d4:8a:bd:2a:
c9:64:5f:f6:c5:f9:95:82:6c:c1:e2:89:fd:4a:15:0c:16:79:
6e:d7:d9:a2:19:7b:15:29:57:d8:a4:2d:e6:1c:29:45:71:81:
35:8f:38:55:16:39:7a:f3:3c:ef:b1:d0:5b:37:a2:12:ce:1b:
93:52:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:49 2026 by rpki-client