Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: o3Qv4ceKh95cEWHh/BA/9LyOT5QWbd/YyvPibp2Ebgo=
Subject key identifier: 01:FE:24:A9:6F:9E:EE:FB:D1:F4:45:57:A6:EB:87:AF:97:02:9A:10
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019CAD2296CECA787366E1710FE226BEF978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 0380
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: Y6whM6YEzq4cnsZgEqfWBeXIDs8yKqvwTbmPBT9jY6U=)
2: qrq3uoi9THjVLQlfAz1J2FQsGx8.roa (hash: 3OxLf+sI9av93bfkLtTgT+YFdGnS4ZkT6MUd/nH1pGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:96:ce:ca:78:73:66:e1:71:0f:e2:26:be:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=01fe24a96f9eeefbd1f44557a6eb87af97029a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:04:bc:1f:67:ab:e6:42:4d:6b:43:51:0b:
a6:c2:67:78:5d:af:ac:d6:3f:0d:42:56:a9:1e:77:
29:da:6f:57:5d:c0:9f:ec:aa:eb:5c:a1:08:91:a9:
d1:a3:fe:00:35:fb:a0:a7:06:ed:0b:4d:25:a9:b9:
90:53:f5:4c:b0:80:86:92:b0:86:57:4f:4f:25:0e:
fa:e4:fc:f5:67:31:98:47:b2:c4:b2:4d:a7:01:5e:
19:e4:0d:2c:79:54:a1:d5:e1:50:d3:f0:13:ab:1c:
13:d7:b4:bd:f3:06:56:56:0c:87:cb:8c:a0:a4:80:
b8:67:3a:fc:ff:74:e2:bb:c4:74:70:af:df:a4:da:
ac:cf:af:b5:5f:65:11:36:13:8f:06:dc:0b:37:95:
f8:20:a5:a1:1b:e2:6d:fb:e2:d0:0a:e7:aa:6c:6a:
b5:be:f4:35:c7:89:68:9e:b8:5e:8d:c9:92:48:4d:
bf:4f:d9:2f:79:d7:7b:c2:46:e0:49:82:b7:25:de:
13:ff:e1:24:75:b0:28:2e:cb:91:91:34:68:45:c3:
00:cc:3c:01:a8:ad:87:19:9e:7d:3d:88:60:26:e6:
65:fc:f3:7a:f6:bb:70:85:f3:30:8c:95:77:eb:e5:
08:13:75:68:80:36:68:27:45:86:05:01:c2:bb:33:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:24:A9:6F:9E:EE:FB:D1:F4:45:57:A6:EB:87:AF:97:02:9A:10
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:a8:c5:a5:03:8b:a4:93:bc:d9:63:bb:63:6e:9b:1d:8b:
68:d7:4a:62:26:55:64:7c:a5:8b:4b:0e:1c:81:11:f5:82:1c:
20:7a:fa:7c:42:1d:69:a8:38:c3:e7:46:6e:85:a7:4d:69:69:
cf:d1:ad:66:d7:62:29:78:b3:a2:8c:00:f0:10:68:62:c3:4b:
06:ba:d5:93:c0:8b:d1:ad:20:8c:ab:6d:b0:1a:78:9e:3f:cb:
59:63:f1:49:9a:09:f9:0f:0e:a3:fd:3e:42:d3:eb:95:c6:8d:
5b:b5:43:e8:37:ae:2b:63:41:5a:29:32:7a:39:4a:14:4a:a5:
97:de:d0:ef:65:b4:fe:91:e1:3a:6d:99:b2:f6:96:6f:73:8a:
c6:5c:51:90:a4:bc:68:f7:ae:1e:d3:d6:9c:4b:32:29:5a:c1:
c2:6d:87:ef:6d:67:4f:40:22:fb:e8:e9:6c:bd:15:1f:78:9a:
8f:ad:84:65:43:01:a9:52:26:a0:80:d8:af:a8:fd:2d:0b:75:
88:2e:79:ee:2d:aa:d8:ff:56:46:72:a8:e8:98:c9:38:7f:a3:
ea:ee:3d:dc:2f:d8:f7:6f:b9:0a:e3:6b:df:66:e0:d2:90:f1:
ac:9b:f2:a8:ae:6c:f7:9c:67:48:3a:d8:d7:03:6c:d3:60:14:
11:37:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:03 2026 by rpki-client