Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: UDGlwBRaJwD16+in8baCPBOf9YzssImDUIAPXgB6JYo=
Subject key identifier: AF:81:19:6F:13:03:AE:DD:9A:AB:86:65:56:76:47:5F:28:CE:DB:1A
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019CABD92C159CB0D56FA3E2C5336583F4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 13FA
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: kfyRXaiWh1CSHzSzJXiJWr2xMJgbQK1SO0TUduELigU=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2c:15:9c:b0:d5:6f:a3:e2:c5:33:65:83:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=af81196f1303aedd9aab86655676475f28cedb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:be:8e:90:1c:a0:c2:65:54:43:f0:1c:53:
a9:1e:95:7a:7e:dc:41:49:1d:75:6d:e9:53:e0:37:
47:9f:06:63:e9:90:d3:22:d9:9b:da:7d:ad:b4:2f:
c6:ec:79:41:81:ce:64:9a:b3:84:a6:13:5c:ed:51:
a4:5f:8c:a7:ad:db:5b:ce:7a:70:4f:59:67:a2:d0:
a3:23:06:60:7f:f2:77:b3:85:91:b4:b7:f6:70:b1:
d2:2b:89:84:20:b9:1d:28:28:28:72:c9:f6:a6:63:
14:dc:6f:0d:f0:7a:d2:c3:41:74:bd:06:f7:59:40:
64:06:2d:f2:41:ea:90:4c:d2:e0:5e:4c:f9:7b:c2:
6f:e8:82:ec:10:17:87:50:fa:01:04:e3:1d:9e:ac:
b2:86:0f:ea:96:4b:ea:0a:5b:55:7e:b0:ab:2d:81:
93:7d:c3:40:ea:30:b8:d3:1c:df:20:83:cb:41:e5:
8f:55:d2:37:70:9b:a3:8f:ca:2b:70:20:2a:60:ce:
5d:ae:82:9d:2b:5f:69:e1:91:53:18:9a:3a:a0:24:
3c:7b:3d:8b:82:0f:e5:79:f3:24:57:66:79:66:e4:
1b:3c:d1:fa:19:68:cb:82:4e:86:da:53:df:af:37:
ad:4f:f8:cb:ee:88:5e:39:19:f3:68:d5:76:88:65:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:19:6F:13:03:AE:DD:9A:AB:86:65:56:76:47:5F:28:CE:DB:1A
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:43:84:fc:e0:6a:62:83:55:7b:60:dc:f7:63:9b:b1:21:57:
f4:a3:89:38:29:ce:81:40:32:24:0f:b2:f1:2c:4c:e9:95:28:
61:4d:8c:95:f2:88:4a:2f:57:ee:6e:78:66:ae:a3:a0:de:5e:
a0:f4:14:51:d2:cc:21:de:0d:ad:da:2f:20:61:86:14:d9:25:
ec:c6:7e:e0:cd:1d:c6:41:6e:a8:d5:a0:74:71:37:3e:5a:48:
15:cd:e6:da:76:3a:86:9a:78:f7:c4:dc:ab:4a:99:d6:79:d8:
f1:0a:c0:e8:54:30:d2:97:da:a5:fa:62:fa:d2:a2:7f:9c:b7:
f5:9a:7b:98:19:6f:3a:22:e1:e8:29:9b:31:6e:53:d3:f1:4e:
3a:31:57:02:12:0f:f9:41:c3:d0:a0:85:df:76:31:d7:a1:3c:
17:be:52:34:68:96:cc:e5:cd:11:7f:24:bc:39:7b:c3:f5:3b:
20:78:c6:64:5f:3c:db:ab:ae:a0:ce:7c:6e:47:87:54:d1:ef:
77:d1:f9:77:92:76:4f:96:76:9b:69:ad:a4:5a:1d:f0:14:01:
e9:a5:81:d0:19:5e:7c:d9:a1:22:ee:c9:59:91:03:da:75:c7:
4b:be:fb:68:cc:54:f8:d9:44:2f:39:35:3f:0b:68:71:08:e7:
d4:d8:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:07 2026 by rpki-client