Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: KPZNHdxP/LWK7KkcxS7NhsQoMmhe5EGI17WrbevNOUI=
Subject key identifier: 03:D4:E5:5F:A3:9F:54:BA:D6:9E:1F:41:42:A7:33:DB:FF:DA:7F:51
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019CC1F3B9EF1A94EF4433CF6D231E90C27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1852
Signing time: Fri 06 Mar 2026 07:01:41 +0000
Manifest this update: Fri 06 Mar 2026 07:01:41 +0000
Manifest next update: Sat 07 Mar 2026 07:01:41 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: Vw9kZz9+x+38P4sm6gzv8UXxyc7l+I+kZws6UlD7hTY=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:f3:b9:ef:1a:94:ef:44:33:cf:6d:23:1e:90:c2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Mar 6 07:01:41 2026 GMT
Not After : Mar 7 07:01:41 2026 GMT
Subject: CN=03d4e55fa39f54bad69e1f4142a733dbffda7f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:40:f5:19:ad:e9:4d:14:c7:55:12:dc:e8:
79:72:29:a6:f4:06:b2:92:b0:03:70:d8:50:12:2a:
ce:ef:c5:11:29:35:e8:e7:4a:62:52:16:92:9a:96:
18:06:e5:68:c3:10:0b:e5:7f:9b:b3:f8:0d:31:75:
db:ce:19:74:22:58:6d:e5:3a:66:fc:12:d0:1b:a7:
22:91:bb:d6:09:22:a4:ac:47:a1:5d:9d:a4:5d:b7:
74:70:96:e1:d6:75:e0:8b:de:74:a6:ac:0a:24:58:
4d:cb:68:8e:41:19:62:53:b2:b9:4e:91:44:f2:9e:
42:7d:38:6d:10:a2:cd:c7:a8:8a:c5:8c:6f:8c:1e:
b7:37:4e:2b:ef:d5:95:36:88:0f:79:69:07:76:dc:
6e:68:96:d4:94:c2:59:01:8f:ad:6e:92:43:52:f0:
9b:0b:fc:8b:51:49:a8:80:fe:56:4e:bb:ce:34:87:
31:6f:81:91:cf:f7:8b:95:82:c6:c1:50:65:61:e2:
42:e3:e6:d2:dd:e3:d9:c4:59:e2:65:ec:1d:2e:4b:
c2:50:9e:ab:a7:1f:d2:3c:05:45:a3:bd:be:34:f6:
b6:72:96:ca:4c:2e:06:7e:2b:d0:6b:14:88:4d:e6:
25:5c:f1:02:a3:45:6c:ed:15:85:ed:44:4f:bc:90:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:E5:5F:A3:9F:54:BA:D6:9E:1F:41:42:A7:33:DB:FF:DA:7F:51
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f7:fc:c7:5d:d0:b9:07:8f:28:a1:70:9f:09:1f:4a:cf:3f:
b3:86:cd:2a:a3:12:f2:87:90:2c:a2:58:ed:20:ef:9d:82:03:
6a:a8:92:2a:2e:ee:28:ce:4d:e8:2d:12:2b:d0:35:a1:8d:96:
e9:b5:f7:d0:11:cb:82:6c:5d:8d:2e:72:a4:73:e6:75:d0:dc:
04:ba:29:f1:49:db:e9:5a:c5:92:60:46:b6:f2:39:83:be:99:
8e:e2:61:aa:6c:3a:7d:b4:c6:d9:79:3f:f4:75:f3:d9:70:c5:
a7:0f:b8:82:dd:cf:f4:0d:e2:23:2b:05:27:56:df:00:8a:2c:
d7:5c:aa:5f:95:7a:f0:ac:a7:17:f6:f5:61:b1:48:6b:86:89:
d9:10:93:71:88:77:39:52:f0:87:17:12:fa:63:c7:e2:6d:03:
e7:2a:fb:82:3b:1d:7c:82:63:5e:b8:a6:24:0c:0e:e1:f1:ee:
01:b7:5c:cd:d4:9e:60:e6:3a:a7:c6:c4:db:e3:13:cb:6f:49:
5e:3c:ef:cc:71:3c:e3:e7:8d:13:79:d1:0c:13:2d:3a:e3:eb:
53:a5:db:35:e1:dd:3d:27:0b:dc:e1:83:f9:5d:1b:93:60:50:
b4:dc:58:9e:90:f3:d3:2d:00:55:8f:b9:aa:67:a3:a1:02:b5:
cf:ec:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:04:21 2026 by rpki-client