Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: ihNP/j36y710ngmb3dirqngYme+svVodrXPKd7HnEWU=
Subject key identifier: A3:C9:78:55:79:91:53:FA:DA:25:1B:CC:36:8A:18:96:B6:E8:AA:85
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 019DDCF9EAD0EE261410DB4B228A60EB8979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 3C
Signing time: Thu 30 Apr 2026 06:00:59 +0000
Manifest this update: Thu 30 Apr 2026 06:00:59 +0000
Manifest next update: Fri 01 May 2026 06:00:59 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: Mq3ViSdz/T0bYQsNzsoTnbVNbVKUmb2RBxUj2+NVjS4=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:f9:ea:d0:ee:26:14:10:db:4b:22:8a:60:eb:89:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Apr 30 06:00:59 2026 GMT
Not After : May 1 06:00:59 2026 GMT
Subject: CN=a3c97855799153fada251bcc368a1896b6e8aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:a6:e0:18:58:f1:31:a9:d9:aa:0f:20:d1:
eb:74:ab:ae:58:e7:22:75:29:7e:01:08:c4:e8:74:
64:0b:23:52:1d:73:89:b0:cb:37:f5:4c:b4:d5:85:
3d:a4:07:1b:6a:4c:dd:8d:b4:f5:b5:e2:68:65:99:
c7:fa:8e:98:ce:17:3d:1d:e6:87:1b:c4:07:51:23:
fc:39:07:50:2e:ab:17:e6:15:b9:20:96:38:a5:17:
ff:26:5b:80:60:6f:fd:49:83:76:fc:a9:f0:2d:c5:
ab:3a:a7:ab:0d:b5:f7:d4:9c:24:53:80:bb:ae:cf:
5c:9e:29:49:c8:f9:3e:04:49:b3:25:2c:57:0e:b1:
e8:28:e5:36:5b:9c:6b:fb:95:65:7e:3c:a3:fc:cc:
c8:46:26:41:3a:57:6f:ec:10:40:e8:6f:ed:89:33:
22:ec:4a:b2:ad:88:63:e2:ff:77:e5:c7:88:9e:6e:
c4:e6:19:ab:5b:56:7e:b6:e0:df:91:69:a0:42:2c:
50:ee:11:03:79:64:31:0c:3b:db:9d:a9:48:99:c0:
b0:8f:ba:a1:c8:86:cd:53:f1:37:60:04:1e:0f:7f:
3f:97:be:2b:26:76:6c:13:a5:7f:c0:10:6a:9c:ef:
c6:85:d7:43:a3:2d:e3:76:81:6a:ce:b6:e7:3f:c6:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:78:55:79:91:53:FA:DA:25:1B:CC:36:8A:18:96:B6:E8:AA:85
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:e6:ca:9e:4e:33:a8:54:8a:7e:e5:fe:82:d5:38:22:ff:
1e:93:ae:4f:6a:b7:e9:54:4d:1c:69:fa:5f:b0:02:55:4b:60:
0b:d0:49:05:42:81:d5:bd:57:f0:00:42:0c:ba:f7:46:26:43:
8f:ea:c3:51:7c:ee:be:fe:57:84:7c:2f:e9:8d:04:3d:68:07:
de:b5:a8:34:43:16:95:f5:64:ef:a8:4d:08:19:92:67:5b:b2:
c1:ff:1a:19:07:51:51:8c:13:ba:d1:b5:f7:e7:57:f3:b8:db:
99:00:83:b9:f6:fc:e9:69:2e:de:c5:99:66:b2:d8:f3:b1:f2:
16:89:c7:e4:48:74:d4:0c:63:ba:71:ac:ae:45:01:69:f4:d3:
c0:83:0c:08:ab:22:12:29:6d:ec:30:de:84:7a:61:10:10:4f:
56:06:fb:12:32:7d:44:c6:c8:85:12:ff:d7:d7:fb:3f:ea:47:
36:c0:1f:7c:98:49:93:87:a2:d6:fa:ab:97:1e:75:60:ee:c0:
41:60:6d:c3:28:79:aa:62:bd:b8:c9:39:b4:89:8f:d5:53:44:
0f:7b:f4:96:ee:2f:d8:93:9f:d5:df:89:45:c5:e9:a3:0b:26:
1a:3d:82:79:28:20:26:7d:7d:66:ef:ff:35:e8:91:1a:83:c0:
d5:5f:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:15 2026 by rpki-client