Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: eU0UDsekmyFv8HobCqoWeZEcjSxEAqMO3bp3jfwCQ88=
Subject key identifier: E3:04:C3:A3:F3:79:A4:7F:E9:A9:19:28:3D:0D:49:7F:BA:6E:0D:BD
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019D37C10FAD1C521765D51F9D9B52DF6EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 077E
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: bkObYI6lfczYv7DPk3mAmpEMy2+/zmVMfyMIYLxGYUE=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0f:ad:1c:52:17:65:d5:1f:9d:9b:52:df:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=e304c3a3f379a47fe9a919283d0d497fba6e0dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:1d:4d:ca:6c:7d:d9:9f:ce:fe:2f:73:96:
bb:ae:e7:49:24:d4:5f:b6:70:08:2b:ea:16:fd:bd:
1e:c2:04:06:c0:52:2b:42:6a:bb:21:12:a5:14:7e:
c9:d0:99:76:4e:77:71:73:a1:68:f1:78:e1:02:1c:
4e:35:59:08:e4:48:43:f7:ca:2e:55:b9:8e:d4:a5:
da:b6:7c:55:f5:41:68:b8:d8:00:56:cb:35:f2:3f:
6a:6d:68:60:fd:45:72:98:c9:dc:ae:ab:d5:6e:d4:
ca:bb:49:ef:7a:a0:04:89:99:7b:4d:67:d4:f4:fa:
bd:76:5c:fd:0d:85:3b:da:6a:6e:4d:4b:c3:1a:da:
59:f1:9d:35:72:72:8b:93:54:2f:51:7d:8e:cd:fc:
f9:1b:a3:90:9c:82:88:df:aa:cc:7e:ca:72:02:b8:
48:90:aa:0f:cb:75:a5:08:ed:81:12:53:e4:17:ea:
ce:4a:20:33:5c:f4:8f:fe:d8:e8:5c:31:b9:96:3e:
63:c8:95:9b:69:87:36:2f:a1:38:c7:04:2f:9d:96:
3a:a1:81:36:ab:da:d2:c8:87:96:e6:cf:55:e5:a6:
1b:ba:bf:f3:11:a0:fb:7f:39:41:49:38:59:3a:08:
e5:5d:df:9b:3b:32:e4:fb:de:2b:cd:6e:de:1f:32:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:C3:A3:F3:79:A4:7F:E9:A9:19:28:3D:0D:49:7F:BA:6E:0D:BD
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:c4:f7:82:92:ba:a7:69:82:f4:ee:c1:46:87:b8:cf:ab:
2e:80:65:59:ec:88:eb:d1:8c:09:6a:c9:22:74:b9:50:58:1c:
7c:5c:d3:c5:d2:fe:ec:f7:a9:c6:e0:1c:66:05:28:66:b7:8c:
98:cb:c2:d0:69:ec:c7:4e:df:ad:29:95:51:23:fb:43:d6:b7:
6a:be:a3:90:de:72:be:91:9d:2b:9f:b2:3a:0f:32:44:5a:f3:
f1:a0:80:5e:60:f2:5d:b8:b1:d2:e4:14:ba:4c:d5:db:53:4d:
76:e7:a2:56:78:d0:28:44:ee:74:be:33:c2:50:71:63:a3:63:
b4:5f:fa:c4:a5:29:eb:ab:7f:6a:7a:aa:75:5a:cf:0e:b7:de:
59:59:10:d4:1a:d3:8b:56:c9:39:58:28:e4:09:f1:68:7c:2a:
66:3d:a9:28:71:a1:9d:40:b2:92:04:23:84:5b:3e:6b:47:33:
13:c2:8e:24:42:6f:32:aa:31:91:4a:62:77:cd:c4:dd:00:f1:
d1:a8:73:f9:aa:4d:c3:78:08:f7:41:fa:36:e3:93:af:37:79:
06:2a:6c:e3:af:7a:d7:57:92:44:6f:7c:ec:7d:e7:bd:99:66:
32:aa:90:f6:0d:b7:70:fb:f4:16:38:fe:4a:30:c7:ae:fd:79:
8d:63:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:11 2026 by rpki-client