Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: MVXE4HlI5mMMRbaR6AWk4xtps5Yy7IBuuv5RK5w4sk0=
Subject key identifier: 6B:9E:21:F1:A1:DD:C6:87:75:B3:B4:99:CD:2A:BC:F4:15:E5:3F:FA
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019D37C0F488A5C6F953D7305D03CE5F9FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: GgWejephMBKqv8E1SgLaxpjIu4yx3UaAJVGMW3rs+CI=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f4:88:a5:c6:f9:53:d7:30:5d:03:ce:5f:9f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=6b9e21f1a1ddc68775b3b499cd2abcf415e53ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:72:b9:b6:88:d6:52:8c:49:63:78:f5:c2:
26:83:a6:e0:83:e3:d6:75:80:9e:0a:d6:6c:bf:6d:
6c:68:2b:60:0e:ad:2d:d7:3d:6b:13:0d:08:74:7c:
45:e0:81:36:04:6e:f8:fc:84:85:0c:45:9c:f7:70:
1c:5d:e3:e0:c0:19:a5:77:0a:b1:8a:6e:2f:dd:90:
09:2e:c2:14:e2:dc:6d:17:09:83:d6:05:30:ae:21:
17:ee:0a:af:64:99:e2:7d:82:4d:f5:30:0f:59:cc:
8a:85:03:ff:10:35:6f:ed:88:9c:a5:53:45:51:34:
da:0c:62:e8:b2:3a:2e:07:b4:5a:b6:88:c7:1c:15:
3c:6b:c7:27:e4:6e:90:86:2d:79:41:66:84:2f:48:
ea:b9:0c:f4:01:05:9d:e0:ec:49:c8:d8:84:fc:98:
62:ba:50:1e:5e:b1:06:04:ae:cf:0b:8b:9a:9c:0f:
11:fd:4a:2f:dd:6c:ea:eb:be:a1:0c:76:2e:af:1b:
9c:ba:09:d2:57:97:18:d2:44:84:af:4a:1c:82:72:
fa:76:f8:0d:48:a4:67:38:8b:36:e4:03:5a:01:4a:
52:e6:c4:94:dc:e3:cf:14:49:29:8d:20:3c:7f:b4:
e4:44:8a:a7:e3:fa:11:88:be:4c:d2:bc:b1:43:2d:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9E:21:F1:A1:DD:C6:87:75:B3:B4:99:CD:2A:BC:F4:15:E5:3F:FA
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:3a:ca:95:e7:50:cb:b7:4d:c3:e6:72:a2:64:3f:55:65:
21:a5:a2:f9:21:7f:6d:ae:c2:e8:a1:a6:e1:0e:0d:e9:12:f5:
ee:02:30:4d:de:6f:16:84:89:13:c8:dc:0e:f8:b0:dd:12:4a:
9b:12:07:ec:16:2c:6f:7d:6c:9b:d8:ee:fc:0f:0f:24:97:0d:
8d:11:cc:b9:6c:e2:f5:fa:d6:3f:29:b3:66:67:86:19:b2:fa:
73:8b:37:2b:e6:44:3c:39:ff:da:6e:78:ac:95:c9:7d:c5:18:
94:44:8a:23:f5:15:7c:08:76:ef:07:ae:87:fc:50:b9:31:06:
00:e3:e6:4c:67:c1:92:92:69:ff:68:9e:34:45:96:aa:ad:ae:
91:13:a3:41:5c:24:c1:0b:ba:e8:fe:74:96:e5:7e:23:8b:37:
3f:1f:75:87:db:44:1b:69:0b:9c:1c:d9:b0:3a:38:28:39:0f:
e4:a4:ca:3b:3d:9a:e3:fb:db:88:05:12:22:15:af:d6:bf:64:
0b:ea:36:ea:13:62:a8:9f:51:41:5d:de:df:da:2e:27:d7:97:
3a:63:45:e2:c3:a4:f3:57:b9:f6:0e:f0:b3:c2:c7:2d:e9:3c:
ad:b6:7a:a0:a7:ac:e4:9b:d7:b8:19:16:9d:08:fc:86:10:cf:
1d:09:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:14 2026 by rpki-client