Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: MzL4ZISt6sq6DbwB2Wg8jNK2ekQznUDbHef9GRA7dug=
Subject key identifier: AC:79:95:DE:EF:87:7A:A3:EE:23:EA:FB:58:C5:B8:18:6B:BE:81:E0
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019D386566B1CC00966EFA8C022CA0031375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 1473
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: 6f45AqmqWHDqasy5XNY53sjK/PU1+pcdh9r/pvjp3PY=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:66:b1:cc:00:96:6e:fa:8c:02:2c:a0:03:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=ac7995deef877aa3ee23eafb58c5b8186bbe81e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:d7:78:69:60:41:13:81:98:d9:7d:78:fc:
df:00:1b:ae:be:cc:7d:28:5e:dd:65:ec:17:50:c3:
09:82:2e:e7:0a:49:02:d3:c0:33:5e:3a:2f:e5:a3:
eb:08:32:e2:84:60:26:6b:3a:b4:b6:74:42:32:6a:
37:90:06:c6:22:a2:12:85:ec:c1:a7:13:2b:8b:38:
bb:dc:49:d8:41:7f:58:9e:75:da:62:9e:46:db:15:
34:9a:cc:6b:7b:e7:0c:e9:92:de:b3:3b:d7:19:24:
04:41:47:14:6a:fa:e6:7f:21:53:09:e5:6d:2c:f3:
a3:be:bd:11:db:14:a5:98:81:fd:b5:47:fc:31:15:
08:a2:aa:52:79:9c:9f:bc:ed:95:ac:f8:38:87:73:
dd:b1:fc:f6:1c:c9:2e:4f:42:7c:ab:be:ff:2c:43:
27:3d:48:cf:85:07:5b:1e:15:24:6e:91:d9:23:9c:
cc:ab:da:95:82:a8:1d:f3:c2:51:1c:e0:eb:f4:35:
d2:c6:34:64:09:45:fd:f2:48:8c:21:1b:37:bd:a8:
da:54:54:57:e0:04:35:fb:98:ef:74:ff:3d:de:b3:
21:f1:8a:b8:50:25:9e:b1:f1:50:7e:6e:50:82:51:
a0:b0:31:52:31:ea:48:14:a9:bd:fb:81:5b:83:f5:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:95:DE:EF:87:7A:A3:EE:23:EA:FB:58:C5:B8:18:6B:BE:81:E0
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:42:24:1d:08:7b:ca:51:ce:d5:8c:94:9e:87:28:30:02:a0:
de:66:05:06:82:6c:4a:47:08:2b:ac:ea:53:ab:86:d8:e9:26:
9b:e9:d7:4a:38:fa:23:5c:73:8f:af:82:8b:76:31:c2:b7:37:
0f:23:b9:fb:fd:3c:d7:b4:5a:49:99:ba:fa:e1:cf:13:ac:a8:
ac:fe:62:9c:90:89:0c:d6:36:00:96:f2:4a:ec:70:31:a9:9c:
31:d1:f2:f3:3e:29:9d:fa:61:08:30:45:44:f9:1b:4a:7d:34:
a0:ff:2d:66:a8:93:e2:78:0c:c5:a2:6d:15:7c:f0:45:6d:c2:
17:b8:f6:e2:66:bd:fd:13:45:1a:0c:a9:be:10:bd:d2:b7:01:
c1:f7:a5:b9:a7:48:07:54:12:dc:97:36:fe:1e:a7:92:38:ba:
b0:37:27:f5:78:19:fa:07:71:c6:78:a5:d6:e8:95:45:7e:46:
ba:b3:e6:e7:4a:b9:99:61:ef:f6:a1:12:bf:96:9a:75:35:d5:
66:13:74:db:55:f7:1c:16:b2:fe:aa:d3:70:30:72:c8:0b:35:
99:a0:9b:9e:7e:7c:a2:41:35:ed:b7:60:a4:44:4f:53:ce:71:
d6:02:23:51:21:63:af:cd:a2:bc:6e:28:92:00:61:9f:b5:e1:
f8:2d:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:41 2026 by rpki-client