Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: XxG/LO5qcemcnkaEILo2JECEjH7cQf1Rr5G/Fr9S15o=
Subject key identifier: E3:33:FE:5E:6C:E3:17:66:55:8B:E8:C9:84:F0:B5:18:3C:79:20:8E
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019D3940A90E8F185FF09C5717AAB607BE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 0193
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: enNHe8M3Whf7n79dyzr+TKHIkC9spHxy8/bvvzVhN3k=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a9:0e:8f:18:5f:f0:9c:57:17:aa:b6:07:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=e333fe5e6ce31766558be8c984f0b5183c79208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:da:6d:96:4a:a5:01:41:c3:5f:38:96:b3:
9d:43:8d:6c:95:ba:6f:99:ea:bd:c7:b5:c2:4f:90:
66:13:ed:0b:26:9f:f7:f2:2b:02:68:cf:cc:2b:91:
70:06:b4:3d:dd:5a:5a:a3:75:06:90:f8:73:f8:4e:
ee:eb:1b:ea:d0:bb:de:60:ea:fc:a1:dc:e5:84:b5:
e9:cf:ae:0e:c4:d6:1e:4f:c7:9d:bd:e5:21:49:c0:
9d:c8:81:6b:5d:b3:fd:76:1d:37:53:4c:46:d6:56:
4e:e1:6f:d0:3e:9d:ec:51:41:45:e3:80:2f:f1:4c:
b7:95:a3:6e:68:ec:65:e0:0c:80:18:e2:f8:0d:a1:
c5:08:7a:da:45:42:31:80:6a:49:f2:a2:1d:f6:65:
a3:dc:ac:41:e3:c9:88:e1:ab:59:96:0f:bd:b5:1c:
f9:33:7b:94:06:7a:66:f0:49:ae:ef:93:6e:81:f3:
01:6d:4e:74:4a:2a:76:49:77:9c:af:4b:50:15:ac:
13:d3:b5:6c:08:03:68:fb:ef:f8:89:ba:72:40:1a:
37:eb:33:b2:4c:21:02:6e:f1:ee:0d:83:43:dd:46:
e1:c1:92:6a:3d:76:e9:18:c5:0d:86:91:af:1b:52:
10:3e:fb:da:de:7d:ba:3e:2a:47:8f:dd:4f:74:f6:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:FE:5E:6C:E3:17:66:55:8B:E8:C9:84:F0:B5:18:3C:79:20:8E
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ed:32:8d:7c:99:f7:81:46:63:95:ef:48:c0:78:6b:b6:61:
6d:2c:e2:40:68:c2:21:f2:74:c5:07:98:e4:82:bb:16:9a:11:
5c:3d:bd:2e:43:f4:dc:47:44:61:22:f2:0b:ce:16:bd:1e:99:
f7:83:57:f8:12:0c:26:6e:4b:3d:eb:fd:78:eb:75:bc:8c:00:
d1:c4:f7:9b:cd:9c:47:ec:03:e4:52:34:91:0c:78:e3:ab:bb:
58:dc:23:54:97:29:84:ad:56:70:60:1a:f3:6c:5b:49:aa:68:
1c:c2:8e:ec:d8:8f:62:95:77:05:e3:30:76:e4:f1:f0:08:31:
8e:bb:1b:55:90:b5:28:67:12:87:d9:23:5e:ff:67:b6:c1:72:
42:2a:c8:a5:4d:78:a2:eb:de:aa:33:dd:af:96:ff:ac:9b:8e:
2c:ed:65:c5:6f:a0:8e:d0:0f:4e:7f:20:e1:7c:8c:c9:4c:8e:
a8:18:43:33:0b:4e:52:1b:2a:90:0e:c6:9b:19:89:25:a9:5b:
43:cb:18:0a:cf:6c:7f:74:7e:e2:05:8e:92:96:12:9a:ad:04:
84:20:a4:5e:9d:96:dc:f3:78:33:e5:74:14:0b:6b:0b:b2:c7:
71:65:51:47:e5:b9:11:28:f4:b9:16:3b:cc:69:31:90:02:a8:
71:d5:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:41 2026 by rpki-client