Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: Eyo8JNBtV6rjQOzrIW29O1CY/4sRtL+/ipNbfjwwtLk=
Subject key identifier: 4E:65:90:76:77:D6:F6:C7:ED:F6:47:E0:6E:0D:73:5D:5A:02:93:8A
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019CABD9191998224D3204EB3F2FCB30C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0F77
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: s7gq8g1jOPwiA8FFl1Kw/4gFoUpTDcR4D7f83sb5Ivk=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:19:19:98:22:4d:32:04:eb:3f:2f:cb:30:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=4e65907677d6f6c7edf647e06e0d735d5a02938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:12:99:97:c2:a6:53:c3:78:fe:01:36:48:
00:75:de:70:66:31:b4:a2:63:38:0b:3c:b4:6d:76:
6f:e5:8a:70:68:fd:21:95:58:9f:8e:e3:69:92:b4:
c9:4d:74:96:c6:51:b8:5f:28:91:70:26:1f:73:07:
d0:b5:58:06:c4:aa:4b:19:7b:be:2a:73:e1:2b:91:
6e:08:e3:1f:c2:a0:8f:c5:6f:fa:ff:44:89:8f:cb:
57:a4:87:c5:52:b2:47:cf:54:a9:0b:ae:9e:40:e9:
a9:eb:e8:80:f3:3f:79:67:b9:f7:90:99:8c:78:d6:
63:8c:4f:ca:28:af:55:d5:5c:a1:5d:98:f6:66:4a:
91:45:bc:d4:89:ee:e3:f2:45:1f:31:40:29:65:ba:
30:32:1b:37:52:ff:bb:b5:30:1b:2b:2a:cb:f0:cc:
50:7c:85:e7:7d:8b:9c:6c:0d:02:6a:17:69:a7:6c:
45:f1:83:af:b7:5d:3e:36:29:16:01:31:e5:2f:2d:
e0:04:b4:44:fd:53:04:7d:bc:87:02:7b:0f:a0:20:
14:95:43:73:65:61:0e:8a:2b:a9:f9:d4:c6:40:fd:
87:ad:d5:2d:8e:60:9b:40:98:8b:80:e4:54:73:a6:
18:b4:05:1d:87:8d:bb:cc:a8:83:dd:12:a9:0c:76:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:90:76:77:D6:F6:C7:ED:F6:47:E0:6E:0D:73:5D:5A:02:93:8A
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:97:64:dc:4c:b6:dc:ee:31:ad:25:c5:f3:f5:7a:aa:af:
7c:5f:61:b8:28:8d:e3:ee:03:61:2e:4c:4f:8f:ea:ea:89:80:
ab:91:7c:a7:72:82:44:66:89:8c:55:1e:34:fa:05:cf:32:fc:
b6:8b:0d:b2:98:c4:9a:24:13:bb:16:b1:62:ce:01:1a:c3:2a:
ad:c7:03:65:15:44:ff:50:47:c9:4c:26:66:25:16:1f:a7:ad:
ec:50:e9:89:82:0d:91:03:af:e3:0b:c5:74:b1:89:84:02:2e:
a2:93:a1:28:43:44:7f:bc:b3:a0:f3:33:a6:37:92:4e:94:6b:
43:39:08:18:a6:98:3c:cc:86:a7:ac:ff:e5:c1:8a:c3:66:71:
df:95:15:8b:12:11:18:f7:11:c8:d6:00:3f:ea:9d:32:9f:4a:
ca:a6:b6:4c:c2:b8:95:32:f9:39:7a:a5:d6:51:46:cc:cb:95:
07:4b:2e:fb:4c:11:ef:7e:e6:a6:ba:87:db:0b:83:78:fb:7c:
4e:be:37:89:70:cf:85:7b:a2:19:eb:ca:aa:13:50:81:72:d8:
ca:e5:57:fb:c7:ef:b4:9b:5f:99:31:3d:ec:e6:7f:6b:78:a7:
40:9d:d8:10:bb:18:b1:5f:6b:05:3b:16:f3:51:4c:a3:85:40:
f5:1f:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:44 2026 by rpki-client