Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: nTDxEp9Ijems/pxjqMFMgi52VSy8er3pi34GvT9RpQ8=
Subject key identifier: 6C:C6:A8:BA:20:1A:A4:1C:B5:AA:ED:BD:21:13:4B:86:B4:05:AC:91
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019D37C00C5EAFF7ECCE746BA9A99376406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0D9C
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: UCMYwDrhHZXpzeFmv8uMcveiBKStgWOELg3wBPm4jzw=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0c:5e:af:f7:ec:ce:74:6b:a9:a9:93:76:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=6cc6a8ba201aa41cb5aaedbd21134b86b405ac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d0:6f:97:76:9f:34:32:7a:b0:b3:e0:02:4b:
75:96:56:d4:b0:99:a4:2d:92:a7:22:92:14:3b:87:
f0:68:ff:cc:46:e4:e9:a2:a2:dd:28:23:7e:04:a2:
77:78:42:f6:c9:11:78:7c:32:81:72:0b:7d:fc:dc:
ad:c8:0f:b1:a1:9c:92:73:49:64:63:35:6e:27:70:
0d:cd:9b:93:8c:7f:44:e0:3e:96:0c:d1:a6:c4:ac:
95:53:4f:25:c5:32:b5:86:85:c9:c0:fc:e3:07:2b:
5e:f2:c6:f5:ab:c3:79:75:04:58:f6:63:b8:12:01:
15:22:63:19:8b:27:aa:1e:6d:b4:ea:8b:dc:0c:35:
18:5f:f9:73:6a:1a:2d:89:76:d9:d8:60:e7:1f:47:
af:d4:5d:4b:9d:d3:5e:ea:dd:6f:3f:5b:88:8b:4e:
8e:f3:fe:6b:2c:78:ec:36:16:b1:95:57:c1:41:6c:
15:d2:b8:98:f2:67:14:80:5a:41:80:40:14:83:c6:
63:b9:4c:7c:8a:08:e9:84:94:d6:b4:49:61:f9:37:
5d:3f:00:ba:8a:14:89:36:83:46:f0:f9:ad:b1:12:
a3:23:20:ab:f0:5e:8a:17:3e:28:43:c0:c9:c1:ed:
7c:4b:92:38:60:23:0b:a5:99:65:31:0c:a9:60:44:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C6:A8:BA:20:1A:A4:1C:B5:AA:ED:BD:21:13:4B:86:B4:05:AC:91
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:9a:36:37:8f:0b:d2:c1:12:53:9f:95:e1:41:e3:16:cf:
4e:a7:7e:7c:ba:f3:7c:42:16:8f:f3:5e:e5:b3:e5:2d:e2:43:
86:71:cd:99:29:97:34:9e:65:39:17:7e:c5:14:fa:0d:50:1d:
a5:57:e5:61:d6:19:51:62:86:37:c4:2e:38:a6:1b:74:2e:7c:
8e:7b:ec:cc:d2:9b:db:4c:55:b7:67:37:5d:38:ab:83:3a:5e:
9e:e7:c7:a6:ab:d2:3d:99:c2:9d:b7:71:fd:36:cd:a9:35:e0:
2f:01:39:ff:2c:79:16:65:81:f0:69:01:ea:6e:c4:24:57:23:
63:7b:24:f0:44:5d:e0:f3:c7:9b:7f:d1:50:5e:da:de:55:9a:
53:c6:c6:53:f1:7f:a5:95:b8:44:8d:fd:80:0b:93:3a:70:8a:
c0:99:10:fb:d1:ed:26:53:c3:32:b8:79:9d:74:43:ba:a8:f9:
f4:d6:3f:cb:d6:77:f9:c0:12:f1:61:bc:69:ff:45:55:d7:aa:
69:38:2e:02:da:96:f1:2a:2f:59:21:ab:dc:56:98:12:96:93:
c4:09:0e:54:23:d6:6f:e0:68:42:15:db:f5:86:81:66:23:81:
06:e0:05:b0:14:01:9d:cd:ac:04:03:3f:fe:d2:ac:fa:f1:61:
09:61:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client