Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: avlurWzJJTrpahhnHvNCZ78wMvZdQqGoO9kZ18stZj4=
Subject key identifier: CB:AD:9D:F1:68:F2:95:FB:B1:65:5E:6E:C9:C4:37:5D:F1:6F:09:DA
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019D371B8BBE44332EE37CA6697A5C913BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 1565
Signing time: Sun 29 Mar 2026 01:00:45 +0000
Manifest this update: Sun 29 Mar 2026 01:00:45 +0000
Manifest next update: Mon 30 Mar 2026 01:00:45 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: VWpH86DK+xa1Nml+6hfqrvw9JZnND1HhivUzVSDyey4=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8b:be:44:33:2e:e3:7c:a6:69:7a:5c:91:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Mar 29 01:00:45 2026 GMT
Not After : Mar 30 01:00:45 2026 GMT
Subject: CN=cbad9df168f295fbb1655e6ec9c4375df16f09da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:ff:1f:d5:bb:dc:5b:ed:24:cc:8c:82:de:
39:b3:50:9e:d0:52:4c:22:53:f7:fb:8f:97:46:7c:
f3:b6:d4:95:ec:c9:bf:c5:30:b3:22:2b:2c:db:fb:
f1:fc:66:29:31:a7:a2:97:37:b4:1e:8f:25:86:e0:
5f:25:52:4b:48:f8:e7:a7:60:2d:e2:a0:80:25:c8:
a9:a9:44:0e:50:bc:f3:2f:9d:15:21:99:3e:73:b4:
b4:d3:52:ec:24:20:10:dd:90:43:d6:4b:a3:ec:91:
5b:ec:87:c2:7e:a1:38:0f:e4:c2:0f:7a:d4:9c:2d:
33:df:d8:47:4e:62:45:19:5b:ef:d0:33:68:a5:ac:
94:14:9b:f0:d8:0b:71:28:36:b3:86:08:12:32:13:
18:32:4e:e4:68:5f:5d:61:50:06:ee:60:78:2e:d3:
47:c6:1f:89:d6:d8:72:c9:90:74:d5:6d:16:a5:ed:
a6:2c:87:b2:39:e6:5e:3c:a0:27:f9:8c:9f:d0:ab:
43:d5:38:e1:d8:d6:98:3b:e8:6a:35:33:8b:e3:4a:
d4:33:5b:cc:6a:99:78:2f:9b:f9:f0:5a:20:ef:80:
2c:85:cd:03:ac:fc:4b:d7:5a:ac:3c:fa:cc:a8:a3:
32:18:d8:66:d9:e2:01:9c:2a:2c:33:7b:f4:06:8f:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:9D:F1:68:F2:95:FB:B1:65:5E:6E:C9:C4:37:5D:F1:6F:09:DA
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:0b:4e:7f:18:0f:c4:97:53:ee:d4:80:c3:a6:f1:3f:fa:
cf:6f:b6:3f:28:60:6d:8d:3e:84:b8:ef:5c:7f:2d:f8:00:19:
67:5f:b7:a8:bb:e4:9b:03:76:4f:bd:1f:d8:96:46:af:82:4c:
7d:1b:3f:a4:e3:59:33:c4:0f:bb:21:b9:5f:2b:39:3c:61:39:
a9:94:47:26:a4:b0:3b:d0:71:90:8a:aa:59:80:ce:6a:d4:24:
e4:c7:c9:50:93:d3:24:25:e5:a7:be:32:b4:8e:89:06:79:5f:
26:12:b7:6b:5c:7d:f1:4d:87:2b:62:72:b0:8a:1d:8f:68:c7:
73:6e:dd:14:05:a8:76:de:c4:2a:68:38:0d:99:97:a5:92:3f:
d0:32:91:19:32:13:ac:0d:c5:85:0d:bd:74:41:e1:7c:a2:28:
0d:77:2e:0a:0a:81:d7:ae:62:2f:14:7a:9b:38:3b:29:ae:2c:
74:a0:c5:08:5a:ab:90:98:7d:8f:d6:73:1c:0b:5e:c1:66:5f:
24:ab:18:61:d0:5e:4a:2d:9e:11:d0:a8:59:b4:bd:5c:5a:9a:
56:fe:cb:ae:72:f2:e4:88:2e:b7:18:e2:28:f9:72:aa:3b:66:
12:95:54:b3:ed:ed:bf:93:18:a3:36:f4:32:5b:85:be:ab:8c:
0f:fb:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:13 2026 by rpki-client