Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: l2yay4EfYs9eBhjpBEvEcPyhyE7ugYMjKxQGciaXWBU=
Subject key identifier: 50:77:85:2B:17:32:FE:73:2F:03:C4:D3:14:67:11:BE:B9:55:3C:A7
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019D37F741F0FE474D472654AE58C847F8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 186B
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: gmxPhRfYWw9Nn87clQRly6KqybrbU6OhMPILbXhP2DA=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:41:f0:fe:47:4d:47:26:54:ae:58:c8:47:f8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=5077852b1732fe732f03c4d3146711beb9553ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:d1:11:b0:25:c8:d3:3c:c7:c3:d5:70:06:
51:4f:af:dd:6c:22:0c:5b:e0:6a:47:94:e4:b1:ca:
fb:1d:a4:65:39:56:0d:e5:b3:83:f0:aa:4e:e8:f8:
9f:a0:bd:60:49:94:95:f5:99:14:b6:8a:c9:39:b6:
41:f4:71:8b:80:ed:a6:63:26:9c:ee:ec:81:de:ab:
d6:3e:09:15:bd:94:ce:db:25:48:61:90:11:2d:26:
c2:ed:83:4b:37:fe:e3:c0:89:40:40:11:07:8b:f1:
64:80:11:14:5f:a1:3f:1a:8e:7d:39:f2:2c:d3:ca:
ee:bd:26:4d:3a:de:ff:9c:30:89:d2:fb:4c:b6:c7:
be:2b:33:2b:4c:ad:96:68:c5:d6:eb:ce:ed:15:47:
3d:e4:fd:47:86:76:35:d0:ec:d4:78:d5:1e:0a:48:
6e:63:fe:2a:e2:b2:e3:6b:c9:2c:9a:ec:97:45:60:
57:38:b8:f9:af:55:d0:de:6d:2e:98:87:2f:64:19:
7e:b7:ab:75:45:02:b7:ce:33:d2:2d:9a:4b:04:37:
c1:7c:a7:b7:3c:f3:87:ec:d4:cf:d2:9c:85:65:a5:
a1:a2:24:5f:97:3a:5f:19:96:66:8b:3c:db:52:68:
62:f0:4a:e8:af:1d:5f:85:87:63:45:3a:db:26:9d:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:85:2B:17:32:FE:73:2F:03:C4:D3:14:67:11:BE:B9:55:3C:A7
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:50:61:5e:39:40:64:74:08:37:a1:78:9d:0e:4e:69:4f:c8:
2b:d3:35:ff:c5:a7:89:3c:b0:dc:88:e7:bd:81:67:39:1b:cb:
4e:93:ce:8b:dc:de:49:90:bf:b8:fe:61:f7:19:bb:40:ec:3e:
38:8a:a5:49:06:68:53:fa:f9:f2:30:8f:3f:d6:20:4a:a4:8d:
14:6a:83:17:05:4a:57:05:2f:0d:73:47:2b:dc:fa:64:13:1a:
01:53:ee:13:c6:df:7c:b1:05:db:08:b1:93:e9:ec:5e:44:3b:
a5:61:65:13:6f:c4:ed:d5:d1:d6:05:f1:89:77:19:95:f9:04:
df:a0:5f:a1:a9:8c:7a:66:e8:4e:4b:a0:c6:d3:dc:6e:72:8b:
77:f3:42:c4:3e:cf:93:6e:b1:77:40:31:9a:ae:a9:cd:a7:4d:
53:91:c4:a1:46:45:1f:21:2c:6a:e9:f8:8c:ea:c0:27:73:75:
74:19:f4:12:35:3a:91:41:96:30:fd:25:b6:4a:86:03:e2:9a:
a5:7f:ab:b3:fc:99:70:cb:60:f1:26:ac:18:93:b2:63:15:b9:
92:bf:9d:c3:9c:1b:dd:b9:a8:6f:7a:01:9b:ca:ba:82:37:05:
bd:3d:db:42:54:3c:3f:4e:21:5e:a7:79:2a:53:96:11:d5:9c:
f7:b9:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client