Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: zZmzrkX4wZkOEmtSwoG5jCjn7MF2ywb6GY1C/uApvXU=
Subject key identifier: 3A:5C:0C:63:5E:B2:42:93:91:68:9A:EB:47:17:04:FE:9A:2B:03:19
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019CE66D66C829438F78FDBD6F6D99289185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0F29
Signing time: Fri 13 Mar 2026 09:00:55 +0000
Manifest this update: Fri 13 Mar 2026 09:00:55 +0000
Manifest next update: Sat 14 Mar 2026 09:00:55 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: DDS/63FdgTKXizy7ewn3bGK6K7nSo9U9hl59coURn6U=)
2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:66:c8:29:43:8f:78:fd:bd:6f:6d:99:28:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Mar 13 09:00:55 2026 GMT
Not After : Mar 14 09:00:55 2026 GMT
Subject: CN=3a5c0c635eb2429391689aeb471704fe9a2b0319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:97:2c:8e:50:b4:83:79:23:11:35:ab:ad:
23:51:c7:6e:42:3b:fd:7d:72:3b:9f:79:26:86:eb:
62:2f:73:4f:93:f6:86:8e:93:c8:f9:8a:55:62:3f:
d2:b8:4d:c8:98:bf:70:3d:76:7e:4a:77:19:3b:fe:
04:d5:57:c5:4e:d6:52:f2:b3:8f:92:72:38:30:91:
56:79:ed:a4:7e:a2:5d:04:af:84:44:98:de:d2:62:
5c:7f:0d:73:42:d3:2e:f6:25:23:ab:dc:2b:1e:4a:
aa:68:1c:32:a5:5f:bf:11:e5:0b:4e:93:65:6e:ac:
67:3d:05:b0:58:04:7c:57:28:4c:81:b1:29:63:49:
a8:52:7b:05:3f:c3:a9:58:8d:88:11:f9:4a:ca:f0:
63:f8:48:eb:00:8d:7a:78:4a:2c:d1:bf:51:73:ee:
64:69:1b:40:32:36:9f:48:6d:ab:ca:97:b0:93:32:
b1:4e:1a:03:d5:ed:0b:f2:c8:7b:3f:16:8c:ea:68:
0f:79:69:d3:7b:71:8f:1b:87:33:eb:eb:b2:a1:ec:
e4:88:19:22:62:28:21:81:6c:b9:e4:66:98:be:f1:
35:58:f8:5f:ae:f6:82:5c:c8:38:cb:d9:c8:04:f6:
c0:f9:81:3e:86:19:08:7f:d4:1b:39:a5:26:9d:b7:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:0C:63:5E:B2:42:93:91:68:9A:EB:47:17:04:FE:9A:2B:03:19
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:48:73:ae:bb:48:ff:b7:3b:e3:4d:de:a4:04:b3:58:83:
72:19:6c:21:0a:15:e2:19:23:d7:29:1a:90:11:9d:a5:24:10:
55:09:01:5c:ee:24:b0:28:ff:0a:24:19:54:7c:e9:25:4d:a2:
48:67:36:a5:16:7d:71:b7:53:6d:06:8c:ef:27:ae:a7:71:bf:
0a:01:28:4d:d0:9e:53:23:0f:77:f3:d5:7e:62:d9:be:97:c7:
32:17:34:ab:d5:87:ec:66:5a:6b:d0:a4:d9:56:a6:e9:f3:c1:
17:53:c8:2c:fc:c7:03:b7:59:4a:c0:60:50:d4:28:7d:ea:88:
4f:a9:4b:4f:fd:f8:80:a1:a8:c8:72:91:6b:90:38:02:53:31:
e9:50:15:c9:df:8a:0e:31:b7:85:3a:bf:33:6a:ff:45:9e:26:
58:38:09:9d:55:06:aa:5a:69:2e:af:0b:45:18:ba:f1:d9:59:
18:22:d9:aa:a1:e2:bf:e0:0f:d2:b1:60:fb:b7:00:09:73:21:
29:70:81:79:43:d4:ce:3d:8c:e4:17:9b:86:e6:03:46:6c:29:
4b:f1:fc:87:bf:64:93:d3:03:24:13:45:e4:65:e1:ca:66:eb:
66:e7:95:3c:d0:f3:73:c6:91:70:6c:79:d1:52:e2:35:87:e2:
81:51:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:42 2026 by rpki-client