Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: IeCQwPFuj5GHuVCqwd2Q6SMdGpklBM+Gax8FK+I4DcU=
Subject key identifier: 4F:ED:CD:A4:22:79:CA:3B:0B:F3:14:7C:D1:43:F2:9D:A1:44:B8:F4
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019D3789206E6572FBEBF56B94A922F9D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: L0lMCDP8gr4mCAYIh+zVRWPdqp6gjdJsKQ6bTTmviQo=)
2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:20:6e:65:72:fb:eb:f5:6b:94:a9:22:f9:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=4fedcda42279ca3b0bf3147cd143f29da144b8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:79:d5:76:54:47:98:44:60:64:ee:b2:eb:
6c:4f:c1:fb:19:ff:a3:2c:0d:6b:43:45:cf:43:84:
24:1c:7a:48:87:b2:f8:44:1b:63:67:67:ff:08:83:
16:43:87:99:f1:7e:59:8e:09:69:89:0d:a5:70:0f:
11:81:84:69:7b:0e:c4:8a:66:76:a7:25:98:65:4f:
98:c3:96:8e:cd:4c:92:48:c2:22:01:8d:06:e9:84:
ac:bd:47:c0:bd:a6:7c:7c:3b:1d:fa:83:39:28:6a:
c4:19:f7:d2:f2:ec:f2:58:57:0f:f4:a4:f7:5d:fd:
b0:de:bb:56:fa:8a:55:7e:11:26:69:cd:90:c4:dc:
72:2e:30:e2:df:f5:fc:54:8b:80:12:99:3a:0c:38:
f8:61:0c:1b:89:d1:b5:f6:2b:06:e1:0d:39:e0:25:
a0:70:67:9e:b4:26:22:82:35:9f:6b:3a:ec:d6:f7:
b4:35:4e:5e:f2:b7:9f:5b:1d:ea:cb:11:33:05:5d:
fd:e3:7a:06:66:e9:7e:c8:bb:4e:c3:1f:96:50:c2:
9d:12:44:2d:a6:ef:2f:38:49:9e:10:2c:b0:d8:36:
f0:8f:9b:d4:aa:7c:7f:3b:8b:a3:35:db:69:45:a2:
e5:1e:49:2e:dd:0c:f1:47:9c:8b:9b:57:20:58:b9:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:CD:A4:22:79:CA:3B:0B:F3:14:7C:D1:43:F2:9D:A1:44:B8:F4
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e8:46:8c:5d:58:2b:d0:dd:05:ab:a4:20:b0:4a:dd:4c:c1:
18:98:c5:f3:10:fc:8c:13:85:fd:a0:0e:84:13:c1:03:b9:ce:
c8:14:e8:fa:9e:70:ad:79:86:e7:48:38:29:3c:14:52:f9:83:
41:59:f7:50:c9:bc:96:1a:35:8a:6b:37:44:b3:28:9c:d4:d7:
94:e8:da:38:33:15:93:29:df:36:8b:0e:74:46:1d:c7:1e:40:
ef:60:0f:68:09:88:27:0c:89:c0:33:50:26:2d:d4:ad:78:70:
d5:2e:ea:38:2f:a5:e1:35:32:41:30:ce:38:33:42:e4:d9:15:
31:98:1d:28:5f:48:74:7b:9b:3b:1f:b6:cc:91:ba:7e:51:9d:
ce:70:f6:e0:3c:36:ae:5b:a4:62:6f:8f:9b:1f:55:85:bc:e3:
3a:92:c4:7a:0f:cf:f5:1b:f0:4a:6f:64:81:90:41:80:29:d4:
87:67:34:28:36:75:97:5e:6f:0c:aa:7e:d2:d8:c4:d8:0c:e0:
d2:b9:7b:f6:37:27:e8:99:45:3c:5e:94:8a:8c:a3:1b:20:4f:
f7:fb:27:29:51:f5:47:3d:9f:11:a9:d0:02:15:ae:84:e1:de:
56:09:b9:12:02:7f:b5:a0:4b:07:87:eb:85:54:d4:83:b3:3a:
c5:0f:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:18 2026 by rpki-client