Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: s469ZiLNP0WgM2+akX6ao0Wg2MTyBejuPd1uvoB0cAI=
Subject key identifier: C3:11:97:CA:EF:7A:87:A0:4E:93:CE:6C:F6:54:E0:87:29:B9:14:EC
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019CAC46A7AED3019780B699AB8C05C1B7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0A1C
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: 5foekIRvdQPxbTHvC0s2eHlzQA4Gh/cbDg7fGPVEv84=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a7:ae:d3:01:97:80:b6:99:ab:8c:05:c1:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=c31197caef7a87a04e93ce6cf654e08729b914ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:b6:9c:ca:1b:e2:37:39:79:8b:88:85:df:
a5:2c:12:15:9e:af:fa:0e:9d:67:1d:18:c0:f4:e8:
74:bb:d5:f7:05:92:c5:1c:be:83:37:fa:2b:88:29:
3b:e4:fe:02:41:8f:c6:e3:05:c4:c2:d7:67:31:c2:
e2:e0:8e:ca:85:62:fc:f5:09:17:a0:71:bb:ed:39:
64:9c:ab:36:98:ed:13:16:6d:a3:52:eb:cf:e0:10:
b3:1b:e6:6a:2d:ba:8f:0a:34:f2:76:78:ab:ae:5a:
8c:04:96:df:be:d5:5e:45:e9:d0:b8:4e:bd:40:b2:
f7:5d:1a:ad:7a:e3:38:f5:14:90:c3:9c:5e:d1:ea:
42:79:9b:b8:7c:4b:ea:71:3f:48:32:b7:4b:32:62:
96:8a:ae:0e:86:83:cf:69:3a:fe:a5:5b:90:22:30:
16:cb:c0:ef:50:fe:a3:e4:99:a2:cc:da:ee:ca:14:
e7:73:87:a1:41:1c:05:a5:bd:52:a6:59:ce:42:11:
81:15:13:a1:2f:b9:e1:fb:02:5a:1e:df:85:4b:6d:
a4:62:ed:9c:84:80:90:1c:d0:1c:2c:68:fa:3e:db:
3c:c6:7d:b7:1a:7a:1f:ab:87:8f:91:63:37:e1:85:
60:cf:6f:77:92:75:e2:6e:13:32:e4:15:64:fa:23:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:97:CA:EF:7A:87:A0:4E:93:CE:6C:F6:54:E0:87:29:B9:14:EC
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:c5:78:cb:f2:fe:51:dc:53:59:fc:f1:f3:e8:a9:81:a8:
da:86:8e:ed:85:c5:53:06:bf:25:50:fe:1c:ae:c8:2b:45:43:
09:51:14:05:af:64:78:6b:31:92:60:3c:f0:f1:37:a7:de:7a:
5b:6e:e5:65:26:a4:6e:a2:39:3c:17:4e:98:3e:7b:09:c1:a7:
90:1d:75:98:93:e6:60:9f:72:d3:d3:cf:af:d2:93:38:5b:7b:
cf:6d:06:43:40:b7:29:af:c2:16:06:f2:ee:e6:67:dc:53:9c:
a0:25:78:70:8a:64:17:04:d1:8a:c4:20:8b:2d:1e:fc:c0:66:
17:e7:b2:44:ee:60:22:dc:ec:17:f4:61:a8:1a:ad:3c:c9:e7:
5e:63:41:af:c4:31:bb:2e:53:af:7a:1e:37:26:c2:55:04:60:
74:61:ce:16:81:88:22:00:06:71:d5:51:4b:d7:b6:c7:52:2a:
0b:48:a3:0a:ad:ab:cc:df:03:3f:13:77:15:d5:6a:25:e9:12:
77:40:4e:ea:d8:c5:bd:bd:85:15:27:66:62:34:80:2b:b0:8c:
3b:08:30:18:cf:e6:de:66:4c:6c:0b:0b:95:00:a1:de:aa:a7:
16:97:6e:03:15:ef:bb:a4:38:09:56:11:2f:2f:2e:ff:83:85:
e7:c0:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:42 2026 by rpki-client