Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: lk+jx78bL0uS9xwB6GfpjPPA3oHctFD3+W/Yf2F+FWk=
Subject key identifier: 75:E0:7F:C4:E8:ED:F9:9C:AB:74:A3:3D:D8:3C:27:AD:CB:FC:C6:9C
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019D386662EB9365100283F422A8F198C912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 77
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: KXjsJe3KQAyVIyaJsqfAYOMxxhxqhNZvRDw7JfeOU8A=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:62:eb:93:65:10:02:83:f4:22:a8:f1:98:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=75e07fc4e8edf99cab74a33dd83c27adcbfcc69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:ae:ab:3c:65:84:c4:da:c0:d5:89:c5:a9:
f3:ae:b1:62:78:63:02:6a:1a:b6:35:37:07:8a:a0:
7f:d4:7b:20:be:02:bc:7d:a6:57:ca:e3:21:96:2d:
43:73:33:f4:70:fe:aa:26:5d:e0:96:6a:da:98:a3:
6c:8d:7b:3f:51:68:9f:60:2d:b7:32:43:c2:07:85:
18:79:20:e0:22:73:8f:a3:5e:5b:e1:5a:91:15:5f:
a3:de:7b:13:cc:cc:7c:e2:ed:65:cf:91:3a:94:35:
9c:40:61:5b:98:30:82:09:62:b6:12:5b:c2:5d:07:
5d:6a:38:84:90:e1:7d:16:97:f4:eb:0a:3d:44:f6:
9d:de:66:c3:8d:51:26:c8:3b:04:80:15:89:f8:21:
51:5f:45:9f:bc:47:6a:f4:84:33:78:b1:7b:9e:5a:
b1:88:e7:fa:9f:9d:0a:8b:87:7d:c6:b5:d5:e7:e1:
0d:41:f4:72:2d:c4:b2:f5:30:7a:e4:b7:0c:c6:91:
b1:47:db:3b:14:40:e2:1d:56:6f:0e:d5:41:13:08:
e6:5c:f2:b7:5e:d6:c7:62:4c:ef:32:41:09:cb:f2:
38:22:03:2c:fe:9f:e4:80:01:fd:1f:d7:2b:63:b3:
59:c8:b5:b0:9a:69:85:c5:aa:54:4c:65:df:fe:07:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:7F:C4:E8:ED:F9:9C:AB:74:A3:3D:D8:3C:27:AD:CB:FC:C6:9C
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:1d:2f:da:ed:6f:6c:d3:bd:e4:d7:1d:82:f1:76:14:a5:
cf:7f:d0:ff:5a:31:68:01:b7:03:82:3b:cf:a0:fa:d4:42:ff:
bf:c6:c4:2d:c5:f9:fb:06:d7:f5:9c:5d:b8:50:a3:8d:86:11:
5a:10:f4:dd:e9:95:e1:75:57:34:14:00:ef:86:3d:77:2b:5d:
ad:a7:c5:6f:2c:c1:f0:ee:c6:de:53:6e:fc:40:70:bb:db:9e:
ed:fe:fe:67:76:72:f4:0b:73:d3:1a:15:b6:bd:d7:b9:56:9a:
9a:58:21:ed:c1:1a:57:49:ad:00:7d:76:19:5e:f6:0e:59:cc:
65:00:69:23:d0:cb:25:25:10:ae:68:89:ba:7c:11:d7:92:b8:
9e:b2:7d:47:99:f4:7b:5a:6a:5d:c8:be:0d:67:b7:78:24:d5:
c8:a4:1a:21:e9:3e:f4:11:6f:42:ce:95:59:3a:98:2e:b6:aa:
ca:f5:cf:91:4a:f8:c1:ee:57:bf:02:f1:f4:7f:3a:f6:f7:a6:
d6:d0:0f:bb:a0:b7:b5:5a:0b:24:65:a0:38:1f:a0:a6:26:38:
1a:34:a9:63:56:3d:84:02:dd:85:36:8f:ed:26:38:ca:4b:69:
dc:fe:81:cf:50:4b:f7:24:ff:36:7e:84:92:cc:db:1f:23:11:
96:45:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:53 2026 by rpki-client