Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: QawJ/GzYvVnVFKH7eBUZL2AxDwGq8TJ43SGkxUl50Q4=
Subject key identifier: 94:F6:0C:7D:3E:20:DF:DC:B3:B1:E2:3E:82:9B:D6:15:63:38:CB:1E
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019CAE35F97D3C309A914FAAD31E9752B82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 17A2
Signing time: Mon 02 Mar 2026 11:01:38 +0000
Manifest this update: Mon 02 Mar 2026 11:01:38 +0000
Manifest next update: Tue 03 Mar 2026 11:01:38 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: 76ywpYo5SN42iQd7h2sPWow5TvGVTBRimp4eJZr9kVs=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f9:7d:3c:30:9a:91:4f:aa:d3:1e:97:52:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Mar 2 11:01:38 2026 GMT
Not After : Mar 3 11:01:38 2026 GMT
Subject: CN=94f60c7d3e20dfdcb3b1e23e829bd6156338cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:ef:d5:86:0d:4e:48:7a:e5:93:69:40:17:
b5:e9:a8:16:28:36:5d:38:67:a3:73:ac:c9:a8:3b:
96:66:5b:53:f2:d3:fa:3f:07:69:49:db:c1:dd:9b:
a8:a3:c1:54:c3:49:4d:3d:df:d7:a5:00:b1:fe:3a:
85:c0:00:0c:12:d0:c9:1d:6c:1b:ad:c6:af:2b:cc:
16:f0:c0:09:6a:91:69:9c:0a:54:1d:c5:42:d6:18:
2a:26:bc:e8:24:5d:f8:d1:97:3a:8e:64:17:d7:1e:
5f:26:e6:ec:38:16:7d:41:d7:e7:e0:63:31:51:ce:
c9:0a:68:64:7c:bf:37:1c:18:aa:4f:ab:8d:74:5d:
eb:2b:77:b1:e8:5e:66:0b:7c:e7:66:7e:95:aa:f5:
30:cc:4c:ff:c2:13:67:70:18:f6:07:78:90:bf:15:
18:38:c5:9c:75:03:fc:51:7d:99:e3:53:2d:dc:73:
d5:d3:28:41:b0:39:30:10:a1:b0:46:2e:96:f5:69:
4f:d3:31:be:27:d9:f7:8a:ea:59:44:f2:69:b5:8c:
fc:c7:c8:b7:03:e6:8a:1c:40:79:ed:8b:51:77:d7:
78:63:fb:fe:e1:73:66:5a:6a:3c:07:94:6e:83:72:
a0:93:f2:f3:74:fb:3a:c1:15:dd:09:22:24:dc:95:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:0C:7D:3E:20:DF:DC:B3:B1:E2:3E:82:9B:D6:15:63:38:CB:1E
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:62:a0:f5:df:e9:ea:be:23:f7:1d:00:af:48:c2:cd:3a:
99:ac:4d:de:8c:51:22:4f:d4:a8:97:33:17:0c:c1:ea:39:1d:
4a:a5:d8:ed:b8:e8:a9:11:d9:92:18:2b:d8:a9:5f:08:e5:8b:
0b:ad:a4:9f:fe:ea:81:2c:02:9e:b9:36:d5:4d:3e:06:89:9e:
d7:a3:ef:07:ad:ca:25:22:ec:2f:9f:08:b5:9a:cb:a8:23:90:
b3:74:b0:3f:e0:fe:d4:0e:97:2b:b6:e3:74:2f:1d:5e:64:23:
49:d9:33:3a:33:3b:5d:4d:32:ca:79:55:21:48:81:d5:f3:a3:
b8:a1:35:23:50:3e:20:9a:df:b9:55:32:3e:0b:c1:f3:5c:8f:
e2:69:7b:36:f1:e7:e0:44:95:fc:29:ea:9f:a3:28:07:27:87:
6c:a0:d9:a6:e7:b9:c5:47:3a:13:67:a4:f2:ce:93:d0:ed:2a:
6d:85:f3:f9:6d:cf:76:e5:c0:46:5b:f8:de:e2:0e:0f:25:3f:
62:2d:23:cf:57:60:56:3a:9e:70:79:58:4c:fe:83:ac:51:d1:
00:c1:7d:b0:8b:3a:11:66:8a:8d:2c:7a:31:d5:ba:a4:ed:55:
28:d4:a2:91:22:84:f5:41:b4:79:d2:b1:10:35:99:5a:f3:bb:
cf:bd:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:42 2026 by rpki-client