Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: Y8ohPPikrCmL0zHwbs7BqcMLi7F7s/wyNCJ8MCEVf40=
Subject key identifier: C4:F4:F9:ED:FF:D0:86:BA:0F:7D:13:3C:72:EF:35:8F:61:B7:A0:1F
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019D38660EC7B6DB4A83E2CD1821CC234491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 11CD
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: MxgHyVVz34mF2tgHjY3dyrFdhnREdqwBx/vsI/tGoXI=)
2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0e:c7:b6:db:4a:83:e2:cd:18:21:cc:23:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=c4f4f9edffd086ba0f7d133c72ef358f61b7a01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:5d:ef:77:70:b1:f9:12:1c:58:01:d1:2e:
d2:d9:87:5b:1c:18:42:f2:b1:1b:9f:84:8c:29:97:
3b:0d:25:21:ec:31:b3:1b:8e:96:99:5a:62:5a:35:
fb:b8:5e:d1:34:88:e2:65:8a:49:b4:b0:a4:0c:2c:
52:f7:b5:17:e8:cf:36:7b:4b:07:c8:b8:9a:b7:20:
96:22:69:fe:e9:a8:9a:f5:71:04:a3:97:ac:3c:56:
b3:2e:33:00:d6:10:2e:22:5f:ee:7b:24:07:e8:8b:
5b:08:5c:72:6b:4b:d7:cd:8d:b6:cb:41:30:25:92:
11:7d:62:ec:92:f7:1c:22:f1:d3:78:ab:4a:5d:7c:
ea:33:a9:b6:6f:ca:4d:b4:8e:59:aa:1e:e5:1c:39:
bf:0f:d8:05:05:8b:b2:d3:a2:29:9f:b5:e4:eb:81:
b1:ed:60:ac:46:c4:ff:19:8b:e6:e3:6f:08:2e:52:
e7:ff:c9:f2:90:6d:b4:24:7d:07:a4:be:11:c2:c8:
42:4b:f8:88:c6:df:43:26:21:44:7b:53:9f:92:bd:
d6:98:45:49:76:49:9d:1c:fb:40:e8:e5:ac:8d:b2:
a7:9d:36:54:45:ec:46:c1:f1:23:c6:91:b7:00:88:
39:6f:9e:4d:b3:88:8a:79:f5:f9:2a:ca:b7:15:73:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:F9:ED:FF:D0:86:BA:0F:7D:13:3C:72:EF:35:8F:61:B7:A0:1F
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:43:d0:83:ca:6d:9b:3b:80:f3:ff:03:49:75:4a:43:4d:60:
87:fd:9b:78:d4:62:34:0e:d5:27:56:b6:b0:00:80:23:c3:4a:
e6:c3:9f:43:ac:2e:5a:0a:06:30:5f:ab:a2:1d:ca:63:35:bd:
eb:ec:91:35:3d:85:51:a7:c9:bc:df:23:f3:b0:45:c8:79:2c:
5a:78:ae:78:47:fe:14:19:62:e8:7f:97:9e:57:34:02:da:1d:
e7:be:36:f3:13:8c:c7:48:5d:18:34:37:8c:9a:c3:7b:d5:1f:
3c:ae:b5:61:af:c6:c8:f1:ee:38:ab:63:bd:ae:59:36:bf:e4:
e2:d3:0d:70:b2:31:da:8e:6e:36:2a:e0:9e:f9:5b:07:2b:a8:
1b:0b:06:43:a1:dc:c5:77:b2:ab:58:39:2a:17:82:ac:e1:37:
cf:13:1f:c3:19:d5:9e:0a:c0:fc:9b:59:0b:5d:ac:07:1f:97:
d1:57:6e:3e:37:cd:e0:9d:6c:92:94:21:17:9a:76:1b:93:47:
2a:10:7e:ec:6d:94:3f:d7:71:d4:cd:55:27:6e:e3:1c:76:cf:
12:25:23:24:f6:3c:54:02:bf:27:b5:f1:4d:a6:38:24:4a:46:
d6:67:fe:ee:3d:90:7a:21:2c:4d:c3:19:53:5c:59:c3:35:b1:
b0:7c:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client