Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: 5KqVRC/hQ4GOcibpm8NsagUdRrancDoUS1CzCa7imiA=
Subject key identifier: 0A:B0:FA:52:B4:9E:B6:63:50:93:16:29:C3:1B:40:46:6A:2B:A1:E4
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 019CE6362D6B80AC351A4B1F70D8F94937F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 142F
Signing time: Fri 13 Mar 2026 08:00:36 +0000
Manifest this update: Fri 13 Mar 2026 08:00:36 +0000
Manifest next update: Sat 14 Mar 2026 08:00:36 +0000
Files and hashes: 1: 2uJAkewiUJwsbNaj2yvunQboIco.roa (hash: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ=)
2: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: nlSaTl4TvD8zIhvR8xAqa4cnNNH9AVv1Mng3RFjy94M=)
3: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (hash: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0=)
4: VaQhwNUDpB1f377_pgDC7bKIVs8.roa (hash: yIsP2S+y7+H5E1qVaCf/heokAGlt0wDZeCh1+1PijTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:2d:6b:80:ac:35:1a:4b:1f:70:d8:f9:49:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Mar 13 08:00:36 2026 GMT
Not After : Mar 14 08:00:36 2026 GMT
Subject: CN=0ab0fa52b49eb66350931629c31b40466a2ba1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:c6:e8:e8:c8:df:8c:8e:f8:3e:4f:b6:c1:
fc:1d:c2:64:80:c4:b6:29:f9:73:2e:05:28:3c:c6:
0a:2e:ed:3d:04:c3:d5:c5:db:10:a6:89:c4:d1:e5:
26:96:fd:f3:9d:cd:f9:22:07:dd:e9:c7:dd:28:e1:
9d:66:32:dc:10:cb:51:71:e5:75:4e:b8:e0:89:03:
d7:ab:9f:11:c5:49:ce:c6:5d:95:ce:f8:f5:af:1f:
17:77:e2:d0:f0:a1:96:0b:a4:54:54:a7:26:8e:42:
a1:50:da:5f:04:71:63:16:5a:ae:cc:41:13:14:1c:
ca:ac:0d:6b:aa:56:f4:39:49:40:69:7c:c4:68:fc:
c2:31:7a:dc:23:d4:58:00:fc:66:79:f6:6d:2d:2f:
8b:62:7b:95:7f:19:c5:19:a0:d0:fb:98:ca:d8:cd:
af:12:42:cc:ce:71:02:a0:50:d6:18:02:4c:23:d4:
d6:fa:c3:9c:df:7f:bf:99:60:24:04:40:30:c2:98:
c7:94:06:43:c7:15:e6:2d:7b:b6:e5:2f:2a:84:a8:
5e:66:0f:81:e9:cf:7b:1b:7c:3c:da:87:2f:ee:27:
3b:2c:0e:f0:63:dc:44:d3:da:af:ca:b6:d5:45:44:
f0:49:74:a6:67:ec:8e:cb:df:20:d6:18:70:cc:0d:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:FA:52:B4:9E:B6:63:50:93:16:29:C3:1B:40:46:6A:2B:A1:E4
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:0d:23:bb:9a:d7:9d:9e:ac:c7:9e:fa:49:a1:40:9b:12:
6d:67:8c:cf:58:89:62:ec:30:a9:db:4c:f3:3f:3e:a3:67:1f:
ff:fb:9f:90:d8:df:90:02:70:03:b5:48:e4:ed:82:6e:70:bf:
41:f3:cc:63:06:2e:39:0f:d3:a0:af:9b:0c:e6:a6:86:e1:b6:
30:d9:b2:31:a2:8a:19:92:f2:27:85:25:ac:d8:78:8d:04:c0:
bc:ad:97:4f:ee:e2:84:0a:a0:c7:ff:bc:dc:cb:d9:16:02:75:
28:32:b2:fb:d5:8c:3b:f8:2b:84:58:15:0c:8e:cc:da:e1:e0:
19:9e:38:10:20:ab:00:85:97:84:cc:ca:97:99:8e:03:e5:ae:
10:19:86:35:37:0e:1d:29:6f:b0:5e:76:d9:a8:2a:b7:4f:40:
e9:11:b3:50:c2:b8:0b:2e:30:a4:4a:c7:fb:c1:94:c8:0f:65:
ef:dc:2b:7b:d1:58:15:f2:0f:38:c6:67:fc:be:a1:9e:41:1f:
32:de:3d:e0:0a:4a:66:05:57:60:be:91:3b:7e:4b:b9:d6:84:
aa:10:a0:44:8d:2e:3e:37:69:fd:f6:15:6b:94:d6:b1:1d:5a:
34:50:35:ad:79:4b:e9:28:0c:26:ec:54:fd:0e:25:ed:a4:6e:
17:02:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:57 2026 by rpki-client