Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: CWpIAB28UbHtHpAkkZROxB/oDiWaAOROnOWQOQortSE=
Subject key identifier: 73:AE:17:5F:D9:F8:E9:3A:FB:3E:81:19:FA:A5:73:B0:0B:01:0A:94
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019CC7BE07920E953782C638EE62884CAADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0F3C
Signing time: Sat 07 Mar 2026 10:00:45 +0000
Manifest this update: Sat 07 Mar 2026 10:00:45 +0000
Manifest next update: Sun 08 Mar 2026 10:00:45 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: aSPnENyoB5ZcCsKU+I/DqTIomDegyknyGjP+VAwXJ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:07:92:0e:95:37:82:c6:38:ee:62:88:4c:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Mar 7 10:00:45 2026 GMT
Not After : Mar 8 10:00:45 2026 GMT
Subject: CN=73ae175fd9f8e93afb3e8119faa573b00b010a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:95:80:bd:0c:31:b2:4f:aa:da:1d:f5:76:
22:70:f8:5d:b1:eb:15:69:42:69:82:8f:32:b5:0a:
76:34:3a:69:5f:75:aa:12:59:34:1c:ba:c7:a8:8b:
15:59:03:1a:89:35:18:32:9f:cd:5e:cb:16:b2:12:
4f:12:98:8e:fc:e7:3d:86:92:6a:6a:8e:46:85:c6:
d2:2b:ed:3a:04:3f:16:db:a7:03:17:71:e9:bd:7f:
fe:c3:c2:aa:7c:04:80:52:7f:f8:8a:3c:fa:92:b1:
81:46:99:86:be:fe:9a:f7:96:b3:dc:0d:c5:2a:c8:
39:cc:fd:1c:ac:7d:ec:40:cf:4c:94:2a:74:ad:16:
40:7b:f4:d4:a3:77:ff:eb:c1:da:36:64:be:5a:ea:
54:0c:05:74:40:5f:8b:8c:58:27:f9:5c:aa:9b:29:
e6:ae:f2:24:6c:0c:ce:5c:7e:eb:c1:49:d9:d3:23:
b7:fc:cf:85:d1:63:1e:d0:f1:c2:b2:2e:01:3b:72:
98:c1:8f:c3:51:23:d1:be:12:e0:9d:13:54:a6:b5:
3c:fc:6e:ca:59:10:c7:e0:10:63:ec:1d:37:a9:18:
5f:f9:6f:5a:41:40:22:bc:78:82:65:c8:1f:cc:e1:
6f:a7:5a:24:04:c9:ee:b3:4d:8c:b7:50:f7:81:a2:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:17:5F:D9:F8:E9:3A:FB:3E:81:19:FA:A5:73:B0:0B:01:0A:94
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:36:64:4c:b5:cf:f5:e5:c8:15:ab:fe:ed:df:8b:57:94:
01:ff:de:e0:f7:d6:4a:b7:8d:6d:7e:8a:2d:2c:e3:a8:70:4d:
48:90:8b:46:82:5c:4c:16:9f:e1:f2:5e:16:06:dd:bb:de:00:
60:a1:95:2f:28:34:b6:05:48:75:6a:22:e6:45:ec:c9:e6:19:
d0:2c:b6:a0:bb:46:cc:64:2f:f2:fb:36:5c:73:25:03:82:35:
54:9a:fa:5e:12:5a:cd:c9:5b:37:fd:12:24:3b:04:cc:3a:2e:
55:39:55:73:bb:18:14:5c:f6:fc:b7:b9:a4:ec:1d:2a:ec:a7:
92:0a:66:6e:34:4c:fc:ac:cb:35:0f:31:c1:6e:0b:3c:3d:d4:
8f:23:81:18:23:e3:8e:b0:6d:38:b9:ee:9f:5d:80:25:0e:eb:
a6:5f:25:f8:5b:d2:04:ac:44:28:78:b7:7e:39:db:aa:10:87:
0c:c7:0d:a8:ad:c2:ad:2a:de:20:a7:89:bc:75:38:91:fd:6e:
70:30:25:39:bc:52:d9:2b:1b:79:98:f3:e8:96:0f:e3:74:f9:
0f:2e:86:8e:38:7d:20:a2:72:17:da:25:2d:b6:07:de:5c:07:
ce:65:2e:55:a1:29:00:a1:8b:b9:23:83:bd:88:d4:36:5b:e3:
a5:12:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:06:49 2026 by rpki-client