Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File: 3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier: u4gP5DvWYFPbG+HFcpLWfiPFUeLhM/DPp04o4/VUxIc=
Subject key identifier: B2:B5:3B:16:42:55:F7:B4:EE:14:47:CE:9C:9B:3D:E5:9E:81:88:3A
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer: /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial: 019CAB6BB6532E89291E9349B48389E157EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number: 0AFA
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: pFRmukLUtY7jX5fYuUKEippyPm31UJDPAgEOXsnf9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b6:53:2e:89:29:1e:93:49:b4:83:89:e1:57:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=b2b53b164255f7b4ee1447ce9c9b3de59e81883a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:43:3e:96:05:a2:23:ed:21:4e:3c:6e:ed:
3d:15:d2:9c:cb:6c:9d:a7:fe:1d:a3:53:89:01:44:
7b:ca:d8:5b:7f:cb:43:06:30:e0:fb:3d:9d:67:60:
d3:c9:bb:73:8c:a1:5b:50:ee:d8:c2:ed:43:7a:0a:
10:8c:bb:63:66:f6:67:f9:78:05:2a:7d:86:81:f4:
7d:3a:87:7c:7d:90:75:67:be:ba:9e:25:22:98:e8:
dc:d5:79:e9:38:7c:1c:b8:f9:12:89:8e:b0:02:0b:
c5:b3:48:db:13:66:e1:fd:fe:31:1f:cb:77:c8:e9:
b9:6c:46:fe:de:bd:b4:d1:6c:b0:e9:48:5f:81:3f:
53:b5:3b:3a:9f:a0:0d:37:82:d5:9f:30:72:d4:e6:
1e:c1:8d:b3:08:93:32:b5:84:88:7e:db:2c:a7:f9:
43:1a:25:9a:9a:7f:1c:99:ad:28:bb:06:1a:96:d1:
e3:ba:17:18:bd:00:5d:d9:a7:31:c6:61:e3:61:f8:
4e:26:bd:b2:50:5c:ec:3c:80:34:df:d6:91:24:fb:
41:8b:c1:4f:27:46:bd:5f:8c:35:3c:1b:c7:bd:57:
e9:a4:23:ab:bb:ca:22:d0:95:f6:3e:a3:c4:60:37:
aa:9a:84:80:fd:43:3a:ff:81:e0:dc:9c:dc:ba:b1:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:3B:16:42:55:F7:B4:EE:14:47:CE:9C:9B:3D:E5:9E:81:88:3A
X509v3 Authority Key Identifier:
keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d5:db:77:b6:dd:c9:66:0e:55:76:65:c5:d0:96:f8:62:4a:
5c:5b:c9:e9:66:38:8a:e8:7e:b8:d5:80:34:16:94:83:15:0c:
aa:5a:bc:8f:2c:54:c2:d1:f2:a0:40:8b:a6:9c:da:5f:76:ff:
6e:17:0b:09:70:c7:47:35:fa:da:23:be:41:6b:98:65:5c:6e:
1b:34:f6:fb:ce:59:9c:e8:9e:f1:30:6d:35:7b:bd:76:7c:e7:
0b:8e:3d:9f:94:34:0c:67:e2:d2:25:83:ea:86:ff:ae:29:f2:
41:89:a9:7b:db:17:94:46:74:33:9a:50:93:d7:b5:b5:78:21:
db:61:a2:22:11:c5:7f:80:72:02:d2:26:b8:c9:5a:b1:4c:9d:
21:b8:da:70:c9:d5:2b:b3:88:36:79:cc:b2:fa:8a:3c:b4:e4:
f5:32:1e:49:79:41:ad:84:55:6c:90:7c:73:64:44:e9:4b:95:
98:52:53:63:4e:a2:c2:15:8f:51:62:71:ca:97:98:43:12:0e:
ec:66:7c:dd:f9:94:a0:10:45:b8:ac:07:1c:b3:30:f9:e8:0a:
2f:b4:b2:b5:ba:96:e9:ff:bd:d4:dd:90:27:a1:bc:d5:38:ae:
82:54:8e:41:c1:eb:10:5f:74:e0:d9:8c:e8:ff:2b:ec:8e:2e:
14:2e:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:16 2026 by rpki-client