Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: 0ysWiuj4LwAsqc03tfb+nRHpXm5o6ki+4vm06D9wR9Q=
Subject key identifier: B8:16:4C:3A:E7:A1:63:89:56:E1:9A:92:00:97:C3:72:84:EE:9D:72
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019CE749A8FE699B2DF54DB8E8A56D0CEEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1746
Signing time: Fri 13 Mar 2026 13:01:30 +0000
Manifest this update: Fri 13 Mar 2026 13:01:30 +0000
Manifest next update: Sat 14 Mar 2026 13:01:30 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 15aaY7TOZkHoCjYBBgG59ZyYr4SrIMi1kyV1YpBgqFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:a8:fe:69:9b:2d:f5:4d:b8:e8:a5:6d:0c:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Mar 13 13:01:30 2026 GMT
Not After : Mar 14 13:01:30 2026 GMT
Subject: CN=b8164c3ae7a1638956e19a920097c37284ee9d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:dc:21:7b:0f:09:7e:30:bd:7a:cc:e8:03:
14:1f:b6:a9:ae:79:93:49:2f:de:a7:ec:67:37:97:
ae:f1:57:f9:dd:ac:89:72:c0:3d:42:22:42:ca:c5:
d8:39:8f:df:39:14:9b:ad:39:7d:55:e2:f9:83:9a:
d0:eb:e0:58:71:b9:03:c9:f2:0c:4d:b6:a4:cd:bf:
81:4c:cd:3a:07:f0:ab:2b:e4:8b:85:33:c3:77:02:
ee:fb:a0:02:9b:f9:82:95:ce:cf:cc:27:6c:cf:2d:
ed:37:19:76:f5:e5:19:0a:6f:21:77:ca:95:25:4f:
48:16:c0:5a:16:2f:b5:ef:9a:03:29:b6:41:89:40:
78:a2:ed:c3:ab:5d:14:7b:e5:78:90:16:35:b4:0e:
2d:03:4a:9c:76:f4:51:b2:41:2d:48:56:a2:df:a2:
71:89:14:e3:a3:b3:65:3b:f4:2b:45:21:f8:a6:3f:
b9:9f:9e:8f:15:a1:37:56:6f:fd:4a:c7:bc:b1:c3:
d7:b7:34:f4:64:36:84:e7:af:b4:83:98:ba:06:ea:
70:40:96:29:02:71:72:d8:1e:34:f7:16:1b:3d:a1:
ef:24:df:c7:af:78:4b:47:f6:99:2d:17:67:f3:72:
9d:6b:8b:d7:cc:01:1e:70:a7:37:20:cb:f4:c9:cc:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:4C:3A:E7:A1:63:89:56:E1:9A:92:00:97:C3:72:84:EE:9D:72
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:f2:f1:ac:0c:b3:b8:9a:71:f1:1d:25:93:6d:f1:93:1e:
45:5a:6a:c5:81:e9:ea:61:c2:52:9f:f4:e5:6d:b9:f4:ab:fc:
24:e7:23:43:a7:49:8a:73:2d:0f:c6:0c:2d:b8:fc:2a:ab:d7:
23:d1:1a:5b:0c:9f:8c:8c:26:d8:1c:bf:91:20:92:45:af:fe:
c7:f0:c5:30:58:3f:1c:aa:af:f7:4d:94:28:e7:33:bb:6b:15:
ad:ae:b8:9d:9c:ac:6d:7f:36:79:e4:b4:df:64:5a:8b:ca:c8:
db:27:78:8e:db:ba:67:86:35:d5:e9:2c:fc:76:d3:0f:59:f1:
6f:06:73:13:82:04:b9:9e:4e:ab:16:8c:1e:a6:2c:62:2a:5f:
74:83:0c:fd:b8:3e:0b:ea:98:5e:5e:c4:14:53:20:92:dc:6e:
23:f2:7a:87:40:c1:33:b0:1c:1d:65:85:05:e5:85:ca:0f:f8:
0c:fa:66:f9:3a:6b:8b:38:0b:35:00:fa:a7:45:cc:0c:22:c0:
17:0e:1b:8b:3a:7d:9c:55:a4:5e:7d:9a:7c:0a:5a:8a:7e:de:
fe:fd:3f:08:52:b5:21:90:92:54:81:26:e1:f9:cf:fc:3a:b0:
8c:74:89:5a:87:d2:60:83:2f:75:61:1f:c8:18:14:61:5e:e1:
c0:9f:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:36:18 2026 by rpki-client