Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: WCXF3hirkyWLIXoQsVgahbqqEpM+cDKDQQx1fEDtS4U=
Subject key identifier: 6E:F9:20:74:2F:3C:C8:3E:1A:1E:56:BC:AA:C5:DA:3C:8E:74:D7:33
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019D382E9EACEEF515F0319CFFC188ED788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 02C4
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: fZ3FXPErfVkWnrgICwMsjzYHiat5EuVYqR9uUZnE4j0=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9e:ac:ee:f5:15:f0:31:9c:ff:c1:88:ed:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=6ef920742f3cc83e1a1e56bcaac5da3c8e74d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:4e:63:68:93:02:e3:fd:0f:aa:e1:dd:66:
6f:15:8e:78:d2:f6:0c:68:24:64:d8:42:bc:53:27:
b5:50:6b:e8:0b:bf:2e:cf:56:15:c6:cb:80:33:03:
d6:20:d1:a9:21:c2:9e:de:0a:47:5b:d4:6b:2f:8a:
15:3f:c6:2e:32:33:90:15:cd:2a:b9:65:44:f0:dd:
7a:a2:3a:56:ec:60:29:1f:53:28:8a:f7:67:f9:eb:
6c:a6:e9:0e:68:7b:88:7d:34:cd:9a:9b:86:2c:1b:
e4:5d:d6:17:2c:ca:83:44:ac:d2:58:d9:ce:a1:be:
06:e4:14:a1:d7:ce:b4:8d:91:9a:fb:19:e8:90:ae:
8e:cf:f6:d2:f5:27:47:7b:d1:59:a6:46:c3:4b:ce:
26:06:0e:82:47:51:94:4e:1f:f2:51:e6:d9:6c:87:
51:f9:44:dd:22:9f:aa:24:65:52:b2:d5:da:14:0e:
90:8f:e9:24:dd:f0:8e:6c:c5:22:a1:88:2a:4d:7f:
56:1b:73:6c:3f:5a:73:d8:22:7d:85:5d:85:1a:ec:
a9:f5:6c:ff:be:73:6e:48:97:61:9c:23:af:5b:09:
ce:6a:fa:55:5a:a2:e5:c1:9b:26:50:d6:9e:ea:0b:
df:60:13:67:74:54:0b:a3:c2:25:dd:6f:1c:cc:ae:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:20:74:2F:3C:C8:3E:1A:1E:56:BC:AA:C5:DA:3C:8E:74:D7:33
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:96:1d:bb:a6:8a:fc:94:29:ff:0b:70:ac:49:92:ea:54:77:
69:e8:46:6b:62:2c:88:a5:8c:b1:10:a8:e0:40:7a:01:75:9e:
aa:1b:e2:cc:25:73:d3:98:a7:19:bd:7c:02:9b:f5:5b:ab:1a:
f0:ce:03:19:b1:24:ca:1d:1c:02:5e:1d:c0:d5:08:54:c8:af:
76:8c:fe:45:99:6a:7c:34:44:f1:65:f2:d8:98:5e:e4:5a:1f:
27:8e:83:86:0a:ec:53:b0:fe:f5:0a:56:99:d9:9a:19:5b:ea:
dd:7c:c9:56:46:59:35:9a:f2:65:74:57:4e:5b:fe:22:ac:6b:
b1:11:b3:d6:71:41:20:2b:89:31:11:83:c9:ed:52:8e:da:41:
3d:42:20:b5:87:e3:f2:02:75:bd:74:0e:80:96:b5:87:b7:ab:
dd:15:6e:d3:09:4e:6c:45:d3:71:a4:8d:ae:89:f4:b8:a5:f9:
54:a8:eb:15:63:4b:a2:89:40:f1:ae:81:2a:fc:19:1c:80:62:
3b:50:0e:a3:e9:33:7b:15:dd:69:90:f4:91:40:fb:2d:59:9c:
65:0c:77:4a:c8:cf:ba:44:60:1f:30:e3:2f:b1:6b:e6:45:d6:
7c:84:9b:79:e7:c2:52:3e:5d:6a:57:d1:3b:4d:4a:80:2b:f2:
ac:6c:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client