Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: o38efhgA7Z4omit27bHljkKPtUy7LHztjBO6zBlpc9I=
Subject key identifier: 74:82:F5:13:4B:7A:9D:57:02:D5:CA:0B:CB:E5:D8:C9:6C:CE:6B:E9
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019D3865857C8AF6AD05EC4C651DC48E3E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 0587
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: EM6zb3Of+fFxyhyIbRBAXefmu3jb27jVazZbxq0B7FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:85:7c:8a:f6:ad:05:ec:4c:65:1d:c4:8e:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=7482f5134b7a9d5702d5ca0bcbe5d8c96cce6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:86:c3:dd:04:f9:52:a6:6e:4e:5a:f8:f5:
0d:55:85:fd:45:d1:0e:f9:82:4e:80:a2:f4:76:28:
da:56:31:a9:9e:f6:06:1b:00:17:1d:75:73:3b:df:
26:06:c4:80:bd:97:aa:04:35:a3:62:44:0b:ad:00:
d1:6e:49:46:75:fc:b0:b1:76:0e:17:4a:65:d4:a4:
fc:4d:e7:d2:38:48:4c:ab:4b:53:e7:af:88:ea:65:
55:d4:e0:40:f4:d9:f8:6e:51:ad:21:95:5f:22:ff:
ea:47:1b:35:74:de:5c:6d:e7:07:eb:58:55:df:86:
eb:f3:b7:4c:82:27:06:6c:61:da:9e:33:aa:4a:cd:
46:58:a6:a8:5d:ed:df:fc:25:48:9d:02:31:8c:85:
35:2f:fa:1d:43:22:34:cf:9d:37:74:8c:1a:ae:92:
b9:47:6a:7b:25:3e:e4:ad:46:ef:08:6a:d6:03:06:
77:21:00:23:ce:7f:c9:b5:e3:dc:fd:4f:dd:a2:da:
2e:f2:9c:1d:f0:1b:a3:e4:93:db:55:4d:98:ee:61:
7f:de:1a:8e:1f:36:9c:ae:ba:b4:d2:19:1f:b4:3a:
01:3f:6a:5a:b3:90:53:f4:03:50:bf:48:59:62:9f:
9a:67:5f:83:7b:a8:8d:0c:be:35:e7:97:b3:ca:a7:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:F5:13:4B:7A:9D:57:02:D5:CA:0B:CB:E5:D8:C9:6C:CE:6B:E9
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:cf:90:0a:77:13:d0:eb:3a:ef:26:4c:b5:6b:5c:1e:5d:
87:71:a7:33:ba:91:df:5e:de:0d:02:99:27:66:cd:a6:a5:be:
8f:67:b5:a4:44:d1:95:d8:f0:ba:bf:85:9d:8e:95:3a:99:ae:
35:8d:84:e8:e8:8c:f8:fd:ec:c8:31:fd:f3:60:2a:b1:f9:5f:
0c:f7:30:83:88:1f:e8:10:db:12:9a:25:f1:73:54:09:fa:26:
e1:47:a0:e4:c8:b8:bb:1c:c0:d4:34:5a:93:86:5a:aa:c1:8d:
9e:a4:60:75:ce:f7:7a:f8:5f:d5:99:2d:98:de:9f:7d:b3:c9:
7c:64:6b:78:c1:21:34:ab:10:a6:10:dd:fe:39:bd:77:af:93:
d7:8a:30:98:99:d8:06:b9:15:cf:55:31:0d:56:cd:6b:ae:1b:
6e:14:6c:d9:48:74:69:12:de:e2:52:fe:3a:e1:41:bd:40:b8:
a2:87:b2:52:fb:6f:b0:7f:65:32:8e:a0:6d:f5:04:46:7a:b0:
93:c6:ba:26:e3:4f:77:06:07:8f:6c:9d:46:77:f9:2f:4c:c1:
28:e2:8e:02:41:2d:b9:ce:34:20:5a:61:1c:ee:43:37:76:38:
e6:83:e2:ed:0f:8c:1f:b2:30:75:62:64:8c:5f:54:c6:e5:38:
87:21:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:10 2026 by rpki-client