Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: C+o2K5M5yGzvKeosUmNUJ1CxeanRL+vzHGnVkHY4Nso=
Subject key identifier: 1F:53:CF:73:24:5D:DB:C0:D9:47:06:53:8D:B7:8D:11:FB:37:77:5D
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019CAB34A3C2F05A93F5DE08475AEF94D258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 07AF
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: 4BihX5PqTLF/P9Ef8RR3ku0lpDiscpkBmZAXU+HjB+U=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a3:c2:f0:5a:93:f5:de:08:47:5a:ef:94:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=1f53cf73245ddbc0d94706538db78d11fb37775d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:eb:0b:28:a5:11:3d:c3:d1:62:4c:89:34:
e1:ce:e0:ff:a2:e5:08:fa:dc:5f:26:a2:de:cc:ad:
24:29:c2:ba:9d:4f:7f:9a:bf:ff:08:9e:c9:20:b7:
7c:4d:9b:89:70:f1:ca:a0:dd:cc:f4:5f:f1:8c:44:
c3:60:eb:53:3a:ff:b6:93:ce:91:92:fa:0f:75:63:
6f:3c:0f:55:73:19:cd:30:e2:ae:43:70:68:f9:a9:
4f:24:87:f0:55:52:b4:9b:81:5a:f2:7f:ff:7c:33:
1b:e8:9d:e8:e7:c6:9a:47:c3:e5:ee:31:f6:01:31:
03:2c:6e:24:2b:3f:27:66:1c:6d:4e:e3:f3:88:9d:
74:f8:c1:09:f4:0e:0d:49:69:40:64:43:20:de:64:
66:5a:ee:d3:ae:49:21:a0:00:f8:5d:34:31:c7:ad:
10:fb:b8:8d:9f:25:0c:4d:88:c0:61:27:9a:94:83:
42:8b:65:f2:50:1d:45:58:64:77:a9:c3:87:05:6c:
4c:0d:d1:83:14:95:e6:bd:fa:cf:9b:58:b9:eb:7d:
0d:46:c7:05:3f:63:80:4d:c8:17:1a:8a:83:83:b0:
05:2e:a2:15:97:f6:36:e8:c9:90:e9:a4:52:c9:08:
3f:bc:cf:91:4f:70:b0:52:66:47:7b:25:19:fb:43:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:53:CF:73:24:5D:DB:C0:D9:47:06:53:8D:B7:8D:11:FB:37:77:5D
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:9f:49:6b:28:b6:32:a0:bc:84:0f:28:1a:75:d5:0c:4b:
b6:df:46:2e:e8:05:7f:94:28:52:91:81:f3:2b:c0:8a:d4:1e:
a4:f5:d4:a3:5d:1e:7e:6c:0f:67:97:b6:60:f3:bc:dd:d5:9f:
96:08:04:10:b7:ab:1f:93:2e:33:f1:5e:ec:12:92:9d:42:50:
6c:df:9e:5d:f6:e0:d8:86:c3:b0:62:9c:5a:58:69:99:53:52:
61:4c:bb:c6:89:16:84:94:41:31:3c:5a:6f:29:8f:c4:e5:d8:
95:ba:b7:a1:86:f1:3e:b9:b4:57:9b:1a:54:21:83:a2:8f:f7:
73:04:34:8e:cb:8e:0b:84:b3:a1:9d:a6:38:60:0e:05:89:d0:
43:04:66:78:28:6d:b8:f8:8b:0b:fa:3f:5d:ac:5f:3d:95:86:
39:2b:ad:12:20:fd:81:ff:89:9e:f7:1e:b0:41:72:9b:7e:c6:
6e:1a:f5:a0:52:fc:7b:e6:6f:19:73:81:32:01:f5:07:12:c8:
6e:4d:53:3c:49:36:c9:6f:b3:d5:9d:88:3a:df:13:da:7c:7b:
b6:ac:e2:c0:33:d4:71:a8:3f:07:9f:68:82:fb:20:4c:18:48:
61:fc:a2:0b:22:0f:d2:73:1b:f2:50:f0:39:33:fe:57:0e:84:
f4:5c:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:25 2026 by rpki-client