Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: cDe+BbLkmmHdMK+kCkDKkgTgtK8JIodh4C0NjUg0TkE=
Subject key identifier: 00:8A:DA:21:EE:FD:33:7A:4D:C8:8F:1E:17:41:4B:72:E7:DA:9C:26
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 019D39AF372BF18A03373A92D07CC8A8768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 0538
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: v+84I0Cl54svdGZaYOYm3HAGh/a1CYibnwJOCLl0qbs=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:37:2b:f1:8a:03:37:3a:92:d0:7c:c8:a8:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=008ada21eefd337a4dc88f1e17414b72e7da9c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:f1:45:5a:20:1d:e4:c4:c1:c1:ec:c7:56:
8b:07:43:55:30:6f:24:e8:b2:65:d0:45:ce:14:13:
be:3a:b5:a2:18:63:22:f0:32:30:7f:2a:e1:6b:b8:
90:79:a3:f5:03:23:de:bd:fa:6b:1d:cc:40:1c:6a:
bd:9e:95:0d:ff:7c:7b:46:f9:e2:79:88:00:0c:70:
8c:2d:39:1e:7b:a9:53:13:b9:b9:a6:af:3f:61:4f:
80:40:28:83:77:98:5d:6b:e7:26:b9:4f:0a:72:79:
d8:5f:df:e0:21:97:d3:ee:5b:5e:93:71:e0:55:80:
41:de:6f:b0:2e:7c:99:3d:d9:0e:f1:22:46:7c:10:
1c:f6:75:7e:4e:bd:2f:71:12:a6:30:06:a2:cd:10:
38:af:a5:f6:90:76:70:63:07:95:79:2e:63:a5:cf:
e4:2a:28:9a:f1:36:3d:7c:19:de:2b:1b:3d:b4:74:
be:cc:73:81:f2:66:6d:89:b6:bd:80:53:fa:c6:88:
3e:53:b6:e7:de:47:6f:ce:1c:61:bb:2b:c5:9e:1d:
7b:ba:81:a2:0e:0a:f2:5a:f1:99:af:6c:d5:75:16:
ee:c5:81:a6:4c:61:5b:a5:af:dd:b3:9c:18:63:94:
d7:ab:31:bc:73:87:60:4a:f5:5b:f3:a8:e2:22:72:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:DA:21:EE:FD:33:7A:4D:C8:8F:1E:17:41:4B:72:E7:DA:9C:26
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:e5:af:81:16:de:76:31:43:bf:01:00:66:ca:01:4a:1c:
74:62:6e:33:f8:c7:fd:75:03:de:21:02:62:70:cc:69:59:bb:
ac:04:40:8a:f3:be:71:4a:ed:bc:c4:bc:79:90:38:61:3c:be:
79:ba:d1:c7:b7:ee:e1:03:f8:88:00:9f:3f:aa:be:b6:8b:cd:
b0:e4:6d:c6:89:5e:bd:30:ac:f4:34:6f:b1:c7:4a:e7:80:d9:
b2:36:c0:d4:ce:26:1f:03:85:28:be:70:4d:e6:89:e7:97:37:
7d:3d:ff:7e:7a:9d:3c:2e:7f:33:0a:15:2a:d5:aa:10:ff:3c:
46:95:da:94:71:55:7a:8c:cc:75:9f:70:cc:a9:83:9b:0f:53:
56:d4:3a:d3:ac:53:bc:c3:8e:b1:0f:89:75:90:8c:cb:dd:af:
0d:94:09:9b:01:12:c3:03:5a:16:00:3b:a4:ce:ad:db:e3:6e:
1d:9e:58:d1:7b:0e:7b:9f:d2:21:92:a0:81:2b:32:f5:11:bb:
08:ad:1a:c3:59:20:7c:3a:78:7e:5e:05:ca:9c:26:c0:2c:ba:
03:63:cd:5f:83:6e:d1:c3:da:37:bf:28:12:6c:81:aa:50:b7:
15:9c:ba:5c:9c:67:3d:c0:77:b1:b1:12:d9:02:a4:39:c0:4c:
f5:48:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:49 2026 by rpki-client