Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: 3eGEm++RkhoeAgjGwva0pcKc+wzS32HsMZjWpi87FcU=
Subject key identifier: B6:1E:61:31:1B:17:5E:89:3E:90:88:8A:8C:A9:32:F7:48:E7:F4:E5
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019CADC7F6604F7FF18FFFEC28CA81F44DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 1769
Signing time: Mon 02 Mar 2026 09:01:28 +0000
Manifest this update: Mon 02 Mar 2026 09:01:28 +0000
Manifest next update: Tue 03 Mar 2026 09:01:28 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: rkXMrUPEFDdbgoezuyv0nEpMLxcobR4QBBiUxn4F5eE=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f6:60:4f:7f:f1:8f:ff:ec:28:ca:81:f4:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Mar 2 09:01:28 2026 GMT
Not After : Mar 3 09:01:28 2026 GMT
Subject: CN=b61e61311b175e893e90888a8ca932f748e7f4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:85:d4:3c:9d:c7:34:43:40:9d:14:65:e9:
eb:51:7b:64:b8:83:49:fc:e4:92:12:ec:8f:5f:76:
30:04:34:f0:ba:e1:28:34:df:41:cb:b9:bf:71:1a:
03:b9:a2:ed:15:32:ad:c7:8e:6b:04:20:e5:a9:79:
fa:de:58:55:92:74:dc:c5:a3:bc:8f:e8:d2:1a:64:
ed:a6:2d:6d:51:78:60:f2:0e:9e:de:12:cc:f3:77:
6a:93:2e:a7:7d:ed:2e:75:f9:18:c4:0a:53:96:fe:
c5:1e:13:6b:3a:67:e2:d6:fa:3b:92:6c:73:46:fe:
ca:38:b1:d4:e2:f2:08:8c:84:28:9d:ae:54:28:f3:
6e:f8:d7:36:f1:e4:49:13:3d:63:62:18:82:70:ee:
f7:5b:80:53:4d:02:06:da:6b:5c:33:57:8f:d8:1e:
dd:ae:d0:8c:e3:6a:fd:85:37:e0:0e:34:8e:3f:49:
2e:8b:d6:ec:d7:33:49:f2:e0:e0:5c:5c:76:a5:5e:
4f:5e:58:8b:c4:7d:33:0a:08:76:24:08:65:2c:30:
3e:03:dc:5b:10:4e:35:83:c0:81:05:5c:11:8e:0c:
c7:9d:f7:19:5f:45:dc:05:ba:07:3b:41:3c:ba:2c:
b5:a7:e9:2e:fa:51:db:50:f9:77:53:0a:15:12:44:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:61:31:1B:17:5E:89:3E:90:88:8A:8C:A9:32:F7:48:E7:F4:E5
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:1d:35:e0:a7:4a:32:97:f6:2c:1c:e9:2a:35:cb:f0:ef:
dc:ef:36:d8:cf:84:08:a0:25:8b:97:6e:a6:1b:db:03:24:79:
eb:e4:70:4d:98:ad:b7:65:2f:2b:56:0e:03:b4:d2:bf:48:3a:
23:e3:67:75:d0:c1:9a:dc:80:46:fa:cd:28:52:7b:de:91:c4:
ae:e9:7e:35:0e:50:bd:08:af:dc:ee:23:d3:ea:83:44:85:3f:
46:fb:b7:e9:41:3f:f3:cb:ab:27:38:14:e2:7c:e4:c9:19:96:
6e:bb:27:77:10:fe:cd:a0:36:59:44:84:23:18:f6:79:27:20:
0b:0e:a8:4c:3a:39:a4:ae:6c:e1:d1:8c:05:eb:95:19:fd:69:
3f:31:3f:80:ac:42:20:bf:fd:e3:4c:6b:64:46:c7:75:ea:24:
d2:39:a7:cb:58:f1:a9:cb:1e:76:39:17:11:59:d6:b3:8f:10:
35:1f:84:ea:a3:e1:cc:45:54:f2:c1:4e:a1:85:b6:d9:3e:24:
49:71:6b:2a:37:41:03:03:8f:6f:d1:86:f7:09:a2:b1:71:47:
90:a4:6f:99:87:01:ba:6f:17:67:cc:7b:e3:6e:0c:7b:1c:b5:
45:77:c7:80:0b:6b:8c:01:ee:89:16:4f:e3:13:e8:f9:07:a3:
b1:3c:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:22 2026 by rpki-client