Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: NuWSPit8ivKLmGOW23bSTc7k2ppQxQWnS2W/TdFdZWw=
Subject key identifier: 1A:F1:B9:94:FF:C0:E7:57:27:B1:BC:D5:32:53:B8:8E:73:0A:A4:AC
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 019CAA585C395666100108C4C7D1FAF32369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0F80
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: +ifNivfb37o1q0KGaJHJzKHh0CscAVgqp8MQJAqh8B0=)
2: _EAdbKIlNCwppTUnYtOH719X6EU.roa (hash: Jm0d38jKbNV/SfdJd3VVcUEtQMJ+UWyy4HHgcaknpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5c:39:56:66:10:01:08:c4:c7:d1:fa:f3:23:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=1af1b994ffc0e75727b1bcd53253b88e730aa4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:da:1a:2c:18:6e:3c:80:31:f4:2b:ba:c4:
20:02:1f:c7:d9:73:6a:a7:93:5a:07:a9:2f:c6:b9:
a0:06:ed:fd:1d:5f:32:c5:a5:74:7c:88:9f:fc:37:
77:52:89:97:02:41:1e:17:af:b1:04:0a:4f:49:54:
15:f4:94:30:2c:d7:f3:f5:99:e1:4a:28:97:60:90:
1a:f0:f4:19:3b:4f:c0:78:0d:e4:82:5e:fc:11:fa:
d9:cc:75:cd:f9:99:64:0f:e5:04:94:fa:b5:2f:70:
fa:24:23:d0:ff:c7:f1:1f:bd:48:7e:d2:9e:a4:19:
09:62:14:70:de:b2:34:14:51:b4:26:12:2d:8e:36:
f7:c7:bd:ba:00:0f:37:81:2a:97:91:4b:35:3a:96:
8e:0a:7e:47:ee:06:78:40:42:2a:56:7f:5f:b6:4a:
37:88:ef:c6:fa:75:50:89:94:bc:9d:9a:8b:fa:df:
bc:ab:a4:24:bb:97:06:1e:70:1f:ec:57:ca:ac:17:
c9:c1:31:83:78:45:eb:de:cc:fe:61:f2:19:db:d1:
d8:46:3b:2b:08:65:65:33:b9:79:e0:06:49:a9:ac:
03:7b:27:96:56:d0:24:d0:a9:b9:d7:96:9f:8c:f5:
10:a0:81:3d:55:0f:b6:47:2c:05:ff:07:a0:73:8f:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:B9:94:FF:C0:E7:57:27:B1:BC:D5:32:53:B8:8E:73:0A:A4:AC
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:df:99:54:dc:2f:bb:11:dc:7d:35:68:0f:b4:af:da:05:
3c:7f:82:01:db:98:c9:e6:bc:61:9c:dd:9b:bf:23:95:df:a4:
b2:90:04:3c:c1:8a:62:73:e4:a4:d3:13:bf:62:82:71:60:1f:
dd:30:a9:d8:ec:4e:3c:d1:fb:82:e9:cf:e0:a6:ff:5c:7b:c5:
bc:b8:5e:94:e8:d0:e0:99:8a:5d:00:7b:a3:be:5d:df:24:e8:
47:d3:c9:82:f4:d6:02:56:9c:1d:3a:ca:77:16:b7:17:9d:3a:
62:5e:af:72:3c:e5:06:84:e1:5f:06:db:5d:79:63:7c:43:ac:
ee:55:ca:12:81:ac:25:cf:4a:b4:9c:00:74:e5:f0:96:9e:c7:
5e:04:3e:79:83:00:e2:72:af:35:43:ee:46:5a:80:25:df:94:
f6:a9:c9:d4:6b:87:9c:53:2b:f2:b7:e9:95:c6:2a:40:b3:4a:
e4:ac:32:bf:d0:b3:53:11:a2:76:22:33:1f:69:90:5c:50:6e:
7c:9e:cf:13:be:42:f5:54:7a:2a:d2:f9:28:51:4b:53:64:f1:
f0:f6:70:44:f0:d4:fc:be:52:1c:91:76:94:89:b1:61:66:d0:
10:32:3e:86:fb:a3:db:71:a8:8b:d8:c0:3e:41:91:c2:ba:d9:
d4:37:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:40 2026 by rpki-client