Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: speUvM68AZr48raB0sa/Eer8tW7f/b1La9SBFR/oprM=
Subject key identifier: A1:05:43:99:42:2A:59:70:99:C6:A4:E5:EC:B0:03:23:D2:B7:62:9C
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019CAE6BF37831BF55608B70F189D03AA613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 1177
Signing time: Mon 02 Mar 2026 12:00:36 +0000
Manifest this update: Mon 02 Mar 2026 12:00:36 +0000
Manifest next update: Tue 03 Mar 2026 12:00:36 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: Uj40OZ6SDJtEuWVI95F9X/Blm6qV+CU9gzjIyJgSdhg=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f3:78:31:bf:55:60:8b:70:f1:89:d0:3a:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Mar 2 12:00:36 2026 GMT
Not After : Mar 3 12:00:36 2026 GMT
Subject: CN=a1054399422a597099c6a4e5ecb00323d2b7629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:8a:f5:e3:be:58:e4:98:8f:89:56:44:3b:
bd:1b:2c:34:1e:eb:78:98:6e:c2:d7:ed:41:a7:26:
6e:8e:d4:a0:fe:1f:d7:e1:cf:7e:29:1b:20:ce:8c:
bb:7b:4b:99:ff:36:01:37:6b:7f:fe:f5:b7:f6:93:
fc:15:91:9e:a6:ff:46:88:41:30:0b:42:52:ef:ed:
05:40:8a:04:95:34:02:e1:3c:a2:d0:45:bc:2a:69:
21:6f:c8:5b:cb:d4:8f:cd:a3:39:0c:52:4c:f4:21:
d3:c0:cd:5d:c1:ac:2c:0b:8c:81:1c:2b:ee:66:5a:
94:51:ee:0c:04:b8:48:82:2f:95:b9:fd:09:83:7c:
e9:45:66:9a:de:e7:a4:dc:76:ed:31:0f:f5:f5:4d:
4d:c1:36:e7:48:96:80:8a:b8:42:3c:c0:b7:80:cb:
5e:77:14:dc:c4:c5:63:a4:86:05:58:04:82:25:f8:
24:29:44:bf:c5:55:8a:b2:5c:c7:6c:78:80:e7:7d:
87:3e:a3:b1:63:3e:21:79:92:84:65:11:1f:05:3f:
55:e4:07:ff:6d:69:5f:e5:90:15:d7:8f:36:8e:73:
15:eb:f4:a5:1e:e5:10:c5:66:12:dd:e6:a8:8b:38:
9f:c3:c1:dc:41:37:b1:fb:02:56:27:3b:1e:96:8e:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:43:99:42:2A:59:70:99:C6:A4:E5:EC:B0:03:23:D2:B7:62:9C
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:19:0e:b7:bf:20:54:5e:b5:05:56:98:40:34:37:9b:ce:
6d:3b:c4:65:03:84:7f:4a:cd:53:97:69:cf:18:e5:00:71:70:
2f:5f:d2:ab:71:b2:e5:26:ab:e8:df:10:e6:36:98:71:e4:9a:
54:a4:36:a2:a9:db:98:35:90:15:02:80:81:44:5a:75:3b:33:
39:80:21:51:85:71:f7:1b:50:86:23:55:b5:0d:43:bf:90:0e:
16:48:d1:0b:25:7a:cc:b3:45:1f:7e:81:c3:2a:e5:dc:de:73:
49:27:ea:dc:3c:78:3d:a5:20:2e:8a:35:cd:af:34:70:f7:22:
97:08:98:f9:0e:e8:c0:e4:cc:be:53:7e:28:95:80:fc:aa:c1:
60:7d:71:72:14:33:13:99:90:72:f7:aa:ec:07:35:be:4d:96:
10:e1:9e:d4:8e:75:04:43:06:15:5e:54:a7:7e:c8:d5:66:5d:
2b:b1:d0:f1:b1:d1:c9:de:f3:d4:54:01:13:c8:6d:89:69:14:
0e:4d:4f:66:a6:64:49:9d:68:85:e7:74:6b:60:58:9a:3d:f1:
f7:42:a2:76:8d:69:65:ac:06:46:c0:0f:12:a9:a7:fb:53:ed:
ee:35:dd:54:ab:c1:7d:1a:6c:2f:4a:6b:7b:17:00:96:3d:47:
f1:bf:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:49 2026 by rpki-client