Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: Ye/+u3EH78l9QtqICl65sKU5q2PLJGW9iwmlQk32OZY=
Subject key identifier: FB:80:EF:91:FB:4B:06:59:F7:81:EE:6B:18:FA:24:9A:4C:AB:90:04
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019CE52385272D5E4D13A3210EF1DA9131CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0AD6
Signing time: Fri 13 Mar 2026 03:00:36 +0000
Manifest this update: Fri 13 Mar 2026 03:00:36 +0000
Manifest next update: Sat 14 Mar 2026 03:00:36 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: Iibr6H0akO9nMXPrv4lRiqxvaROklBqxfJ16A8mTvU0=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:85:27:2d:5e:4d:13:a3:21:0e:f1:da:91:31:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Mar 13 03:00:36 2026 GMT
Not After : Mar 14 03:00:36 2026 GMT
Subject: CN=fb80ef91fb4b0659f781ee6b18fa249a4cab9004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:e2:ea:56:b2:ce:e1:36:fe:d5:d8:ea:ba:
c0:bb:4e:9f:87:1f:ef:eb:29:be:66:3e:b6:25:69:
e4:1f:ae:f7:56:7a:cf:49:1e:4f:fc:73:a4:df:f2:
43:ce:b0:60:97:19:08:10:e3:a2:6f:34:ea:5b:2f:
60:6a:e7:17:23:3d:c4:4a:7c:49:2e:b5:78:f3:d4:
17:2b:38:52:2e:72:55:93:a9:39:e0:cd:f2:7e:7c:
83:06:a1:05:21:e9:29:ff:3e:09:72:08:c2:4f:b1:
84:de:22:88:58:5b:26:ef:9f:76:c4:10:ef:80:07:
aa:e4:b3:d1:b1:f7:dd:92:59:6d:69:c2:92:e8:76:
ac:b7:27:4c:55:dd:84:3d:92:e9:67:2c:85:af:68:
46:28:f9:0a:4e:48:bd:58:38:28:95:a6:01:31:a1:
70:51:dd:46:f7:5f:8c:4b:50:46:d7:48:44:58:4f:
ee:00:26:49:59:33:9a:9e:0c:e8:19:31:a1:60:49:
f6:ac:9d:f1:e3:84:dc:e1:63:c8:d1:5f:bf:54:43:
2c:1e:28:2a:23:7f:9a:9e:01:6c:2b:5a:aa:e8:4e:
6a:3d:63:20:44:e0:88:eb:00:2b:d7:ea:8b:00:b2:
72:c4:5d:b8:27:18:21:45:fd:2c:50:cd:f4:c7:f0:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:EF:91:FB:4B:06:59:F7:81:EE:6B:18:FA:24:9A:4C:AB:90:04
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:fd:58:bb:e1:80:44:4a:8d:93:fd:9e:5c:84:0f:03:a3:
63:a9:44:4e:ef:8a:4f:e5:2c:15:44:46:db:d4:35:88:b5:4e:
d4:30:1c:c0:46:e1:ec:5a:dd:64:6b:07:af:a7:df:e9:18:c1:
90:4d:e8:48:62:64:d4:c9:f2:26:a7:a5:d5:1a:f9:91:83:1b:
00:ad:05:cb:d0:c9:35:4b:a0:08:22:82:49:ec:e8:fc:0e:b0:
ff:90:f0:05:2d:e8:17:d2:c8:80:9b:8a:a6:cb:94:e2:53:96:
7f:b2:52:bc:e3:b0:5f:e9:09:c6:e9:f2:2f:48:21:4c:b3:08:
52:25:b0:16:2f:81:a8:15:1c:9d:99:45:6a:44:52:9f:f2:62:
68:ee:aa:37:e8:9b:26:a7:7b:32:1c:a1:51:43:68:a9:b5:b3:
f9:30:d9:46:1b:cc:ca:5c:3f:ea:68:6b:f2:7e:2a:29:8f:e2:
c2:d7:1b:85:1d:fa:b6:b0:ed:00:38:dd:1e:b5:85:e5:de:cf:
a1:f8:66:8e:fa:48:64:87:84:75:64:d7:13:58:ac:9c:61:3c:
04:38:67:ed:2b:50:b2:e0:1b:7f:57:89:37:a5:ea:4f:96:ca:
f7:1a:c3:56:ef:d2:a4:4c:5d:02:91:47:b7:e6:3b:08:cd:cf:
b0:af:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:52 2026 by rpki-client