Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: fu3aKbyxTz1KCI/O+g/aV7S5ivWfsKU4RgU/lsL+pnA=
Subject key identifier: 9E:66:A3:1F:88:7C:04:F6:43:DB:27:F3:B9:38:4E:EB:70:3F:51:98
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 019D13B41FC345CACF540FCE7069DB96A24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0801
Signing time: Sun 22 Mar 2026 04:01:04 +0000
Manifest this update: Sun 22 Mar 2026 04:01:04 +0000
Manifest next update: Mon 23 Mar 2026 04:01:04 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: 64GjeleUvTVtvTg1UmnCb8yovgLi5LZvzMb/s1KlsH0=)
2: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
3: ezZ2s7vM_vTGuAjYXi6un0LAHgM.roa (hash: FqUWKm/wtZJygI56D9CwfC5nsdth685XmNZzJnjwPBQ=)
4: zkgdKHScYcfkNf_hh7vlGDs0B88.roa (hash: DtYW3iy119fpBsexhV56/OzVqBZUBd8eZdz8luW6zw4=)
5: zz2jRWtl0ZmBUMIyfCqK089JqZE.roa (hash: 6YCEfjH+kikFIKbX6N6L9tIisswKqNgalcvAp8ZWIls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:b4:1f:c3:45:ca:cf:54:0f:ce:70:69:db:96:a2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Mar 22 04:01:04 2026 GMT
Not After : Mar 23 04:01:04 2026 GMT
Subject: CN=9e66a31f887c04f643db27f3b9384eeb703f5198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:62:97:be:7e:7f:0a:5f:35:93:f4:2b:7c:
86:4f:1e:db:a2:db:03:c7:97:ae:ad:ff:f8:4e:63:
aa:da:0a:36:a4:e9:3c:90:d6:2a:63:3f:74:85:71:
ed:6d:d0:f3:d3:ca:07:08:4e:24:96:b1:b0:cc:38:
ad:32:fb:e8:00:17:e5:19:f2:f4:4b:c1:ac:12:1d:
f7:d9:fb:9c:27:a0:63:d2:08:27:f6:0d:0e:79:e2:
99:1e:cf:91:60:ad:69:7c:e7:13:b5:38:6f:43:b7:
a3:42:a6:0a:05:b8:9f:ec:24:32:25:45:2e:f3:e5:
5b:e7:81:a9:fd:f3:d8:4c:72:a4:d3:d5:23:15:49:
95:90:d4:ee:ec:60:6c:70:9d:54:a0:be:eb:ef:3b:
15:97:e4:84:e2:cd:ab:bd:93:33:97:75:ff:cd:70:
8c:e8:d7:06:f6:43:6d:aa:11:8a:0d:37:f6:01:1e:
86:fa:f9:a0:54:06:75:5d:0a:b2:ea:ea:b0:b4:98:
95:bf:91:fe:00:9d:ad:26:68:af:98:9c:f8:d4:04:
13:82:31:70:39:c1:89:c7:2c:ef:00:b5:1a:e0:7c:
e7:e2:93:20:a4:e4:c9:e9:e1:ed:e3:3b:b3:e1:0c:
b1:fa:21:95:22:1b:db:13:ae:ee:5b:1a:c8:16:d2:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:A3:1F:88:7C:04:F6:43:DB:27:F3:B9:38:4E:EB:70:3F:51:98
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:f0:6d:a5:15:5f:dc:ce:8c:6e:92:af:c6:2a:ac:db:4c:
1b:86:60:9d:91:98:23:3c:8f:98:1d:42:be:9a:73:b1:bf:50:
ed:bd:8c:3e:b1:f0:73:b1:bc:a6:7f:a7:d8:67:b5:1c:a5:48:
4a:f1:5c:93:9c:60:22:6d:c3:41:79:58:d3:0d:46:4f:9a:32:
f0:b1:86:36:ed:eb:c6:c9:bc:49:34:13:25:94:36:75:57:59:
26:0b:6c:ae:92:d0:3b:f3:cd:97:61:a9:d0:4d:e0:c6:b7:41:
03:56:b8:06:5b:4b:e8:6a:34:c5:49:2e:ea:37:cf:d4:34:9f:
cb:c4:75:2f:9d:30:9b:c5:0a:93:17:2b:eb:60:1b:7f:ce:a1:
ea:9f:97:8f:62:23:03:10:2f:ac:c4:8f:11:24:8e:4d:f5:a7:
86:29:e3:b4:44:91:34:f4:b7:05:7e:12:85:55:06:c4:62:cc:
85:ee:fb:29:09:3c:7c:c6:02:ee:b5:ef:41:7a:02:2f:81:ff:
bb:86:19:8f:26:5b:ac:36:cc:8d:43:c9:89:77:6b:7e:12:44:
25:e6:a0:06:04:d1:92:95:85:44:fa:37:7a:d2:6a:df:8e:84:
7d:1f:5f:c8:7b:b5:0e:1d:c9:26:20:fe:5c:a1:af:49:de:b5:
a6:80:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:33:18 2026 by rpki-client