Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: sZZbu9x0IW945OGXyPfxC/+0r/m10JY2i2bxL2kLs7Q=
Subject key identifier: 0E:5A:C3:C2:61:0A:31:0D:AA:B5:27:A1:5C:BA:8C:B6:81:2D:F1:5E
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019D390A174148E98C5A047F5AA602D3DC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1534
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: lIIQa8ZhX4ZdOxA62ttmfLgQuriRi4+jD2JfocKyM20=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:17:41:48:e9:8c:5a:04:7f:5a:a6:02:d3:dc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=0e5ac3c2610a310daab527a15cba8cb6812df15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:4c:3c:38:c5:de:b0:ef:8e:ee:31:8f:9d:
68:20:0a:0e:de:53:67:f1:c2:df:77:24:d8:3b:d4:
96:d3:b6:4d:93:89:fa:55:42:24:50:11:35:e8:50:
50:f9:ac:80:1c:b9:a5:dd:4a:66:9c:f4:00:82:5a:
73:e8:16:3f:26:3e:4c:dc:a8:a6:17:0a:37:78:f2:
7f:bd:1c:aa:53:ad:05:a2:e0:19:fb:84:51:fb:a0:
97:f6:e7:5d:d3:ba:e5:a7:71:75:29:84:c3:2b:0b:
89:a2:11:00:64:34:50:91:6f:d3:e5:4c:e9:b0:02:
25:af:e8:c9:38:8f:22:87:3c:c7:fe:c6:68:5f:11:
18:6a:00:05:82:05:30:39:c8:00:b2:e1:5d:d1:fd:
62:e1:41:63:43:c5:1d:fe:41:24:9b:d5:30:a3:24:
94:55:68:70:db:a7:4a:16:e7:52:4e:36:e4:75:71:
36:d5:55:d0:97:81:32:60:ec:d9:5d:27:88:2e:e3:
ef:ff:5c:ab:72:9f:3c:b9:86:62:92:19:e6:aa:46:
b8:5b:3a:ff:d2:b7:ba:4f:ab:b1:c9:0c:d8:7a:14:
7d:bf:e1:f7:4a:7b:47:d5:3c:1d:50:9e:7b:5b:b9:
32:17:e2:ba:5d:fe:f0:dc:c1:c9:f7:a8:22:e1:34:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:C3:C2:61:0A:31:0D:AA:B5:27:A1:5C:BA:8C:B6:81:2D:F1:5E
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8e:47:f3:e2:b3:81:64:2c:d6:71:85:db:bd:c5:f6:9e:a3:
b9:cf:f5:57:18:1b:d3:98:b6:8a:00:bd:5e:57:66:1d:e3:9a:
24:73:6c:78:57:ba:1c:73:83:f0:5d:62:75:b2:dc:f5:04:70:
ba:70:a8:0f:90:a1:ac:8f:06:0f:87:fb:77:68:80:3b:ca:23:
72:5c:bd:ad:01:de:82:e7:99:4c:60:a9:cb:62:39:e0:b0:90:
e1:3d:53:c4:78:17:0d:de:93:c7:dc:44:8d:da:3f:4b:63:2a:
66:96:2a:da:cd:cc:5d:91:1c:13:6e:f9:8a:d3:89:e5:4e:d4:
bd:bd:5b:67:12:61:b6:81:e7:c8:44:63:9c:49:c8:5b:74:7d:
71:6b:0f:b5:49:a5:63:c2:d5:a8:e0:02:b2:87:4d:3e:47:2f:
49:02:0a:c4:91:90:3b:ff:44:55:36:81:ff:f2:0a:87:23:52:
bc:2d:11:e2:fa:fa:6d:b8:03:50:e7:23:f6:28:87:bc:d5:d5:
df:d5:b3:c9:9d:63:33:ae:72:5b:77:e6:c9:23:9e:d1:b4:f5:
4f:b7:2e:d9:2b:0f:ee:4e:e9:52:51:5c:37:ea:6b:56:d7:71:
75:72:45:a5:9f:53:7e:9f:02:06:27:8a:a0:79:5b:94:1d:4f:
22:fb:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:10 2026 by rpki-client