Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: /e2jPmmM5H+x7kYxqMTO4O2qhcdsEQzBt4UwrVdj5Nw=
Subject key identifier: A9:EE:CE:AF:FE:25:B3:3D:31:8E:42:A4:6F:F4:EE:E0:BA:0A:A8:69
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019D389C3BCDD21EC35BCA90B9B07E7E497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 14D8
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: crx1QOD8hE102IY9xxcgxpy3l8Ng5FC1jCXS6JvQ5ac=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3b:cd:d2:1e:c3:5b:ca:90:b9:b0:7e:7e:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=a9eeceaffe25b33d318e42a46ff4eee0ba0aa869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:7a:2b:5d:a2:e3:98:ef:be:90:5b:62:67:
2e:5c:2b:c3:6a:cc:e0:b7:ea:34:96:7f:5a:80:2f:
24:10:25:3d:81:14:4c:0e:1b:7e:b9:79:2a:a8:97:
1c:c6:13:45:70:1c:06:6b:2f:7c:43:5c:07:a0:66:
32:59:b1:9c:83:51:2b:65:a1:b1:32:a3:0c:3b:49:
17:81:ec:c0:26:06:15:73:57:71:c5:92:96:60:08:
3c:d3:51:7b:c0:cc:3c:e9:9c:d0:ef:e5:1b:a8:a0:
c4:12:0b:a6:82:41:1b:d1:7d:8c:ff:9d:e1:44:d8:
18:e9:34:21:c3:cc:54:40:42:ba:aa:cb:ec:51:7a:
a9:67:71:37:61:46:27:02:a9:f9:00:a7:dc:21:e3:
b2:39:b0:61:29:77:86:d1:84:fe:e4:03:19:5e:e4:
fa:bf:75:be:30:46:1f:16:61:b2:6f:60:90:11:d8:
9a:44:e2:10:45:67:66:10:27:cb:90:80:09:e3:6c:
43:1d:ec:2e:97:9d:a8:33:2e:bf:45:be:a4:a4:86:
4f:72:b9:8a:92:67:a8:ed:61:df:0b:0c:7c:21:e2:
81:2d:af:ce:bd:41:7b:a7:b4:22:87:81:59:33:85:
2b:65:61:fb:ca:60:0a:9a:39:fa:24:7a:6c:d6:de:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:CE:AF:FE:25:B3:3D:31:8E:42:A4:6F:F4:EE:E0:BA:0A:A8:69
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:21:c4:79:96:e4:70:b7:ce:c7:e5:fe:8c:38:8c:42:da:
5a:e7:e5:af:12:75:dc:2a:4a:43:7f:a6:95:4c:da:a0:db:cc:
11:25:77:b0:92:e2:05:8e:0a:e8:eb:c4:19:6a:85:72:6e:de:
97:90:26:a1:ee:9f:8e:d7:f3:af:6d:43:57:18:d0:fc:8e:92:
d1:53:6a:d6:6a:13:34:a6:ae:74:7f:5c:31:45:e1:67:20:5b:
0a:45:65:ab:a8:d9:af:ee:ba:7a:7d:76:d0:67:10:15:26:44:
33:b0:ec:5d:70:c7:15:1d:fd:e5:96:7d:13:51:ed:25:8e:c8:
60:da:89:fe:01:fe:ef:31:da:90:c3:80:bc:3f:02:e7:23:d4:
9c:41:3f:5b:e8:d8:bc:09:d6:65:ad:11:db:da:92:26:08:47:
e2:ee:18:b2:d0:ce:83:eb:29:b3:c1:49:78:fe:dc:d2:bc:53:
1a:d1:1b:77:bf:a9:d8:6f:95:bc:2e:56:f7:e7:52:dc:0a:9a:
7b:f8:26:18:94:9b:c1:fb:cc:cb:fe:8f:69:43:6b:01:7a:47:
dd:ff:5c:f6:0c:e6:46:11:b4:66:5b:e8:b4:93:eb:62:83:ab:
cf:16:56:a0:15:93:b2:41:0c:5e:aa:c2:1e:bd:5d:f7:42:ea:
56:b6:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:26 2026 by rpki-client