Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: VKtOd5Mema9cx7bTIepYjln9fABe+PljBxS2JURcFaE=
Subject key identifier: 01:35:5C:87:EF:6A:15:40:23:32:AE:54:E4:0F:E9:4C:F5:F4:74:B6
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019D39E5541872761F2DF0044BAF5D65E76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 14:00:23 +0000
Manifest this update: Sun 29 Mar 2026 14:00:23 +0000
Manifest next update: Mon 30 Mar 2026 14:00:23 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: 6ajko6mLlbXLhSLRCLbm6DJLts14tfM4Whtw1JqADpY=)
2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:54:18:72:76:1f:2d:f0:04:4b:af:5d:65:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Mar 29 14:00:23 2026 GMT
Not After : Mar 30 14:00:23 2026 GMT
Subject: CN=01355c87ef6a15402332ae54e40fe94cf5f474b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:68:5a:ab:9c:f4:bb:36:c0:f8:8e:28:bb:
f3:df:cd:09:a3:f3:81:64:5e:4c:71:f5:4d:14:c0:
58:23:c3:08:5d:b6:e9:79:ac:dc:71:55:c3:98:65:
26:88:c9:5b:35:8b:6e:78:04:07:5e:a9:72:4a:21:
51:26:af:80:87:56:7b:23:9d:84:d2:7f:3c:9b:f9:
ca:11:8c:14:f8:49:58:7a:c1:f1:ef:98:59:7e:a1:
3e:18:a1:c8:02:4f:e7:8d:b5:9e:ae:32:87:6e:13:
3d:78:bc:e9:4f:53:c3:8d:51:e0:17:54:c7:26:54:
05:4c:61:ad:88:71:7c:58:9e:06:8f:88:af:15:d9:
5e:a4:b8:b2:e9:9f:a7:00:b5:b8:e5:0b:c0:e2:cb:
b2:d1:78:15:ed:73:30:2d:6b:51:db:61:3b:9f:ee:
4f:6d:00:44:26:a5:f7:e6:75:8c:1e:77:d2:3e:7f:
58:18:30:0e:12:a6:47:10:0b:55:50:4a:d7:f5:d5:
86:6e:22:d6:73:a9:10:8a:e2:41:84:9a:f1:d3:42:
eb:34:07:fd:e2:ae:1a:68:cd:38:92:2b:70:5a:2c:
52:29:c8:e3:ea:b1:fb:97:af:71:81:aa:42:18:3e:
1f:2c:c8:e6:2c:9b:c9:e4:ef:05:8b:33:24:11:a0:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:5C:87:EF:6A:15:40:23:32:AE:54:E4:0F:E9:4C:F5:F4:74:B6
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3a:95:6f:72:ac:cf:5d:41:b9:3f:bb:16:58:72:53:13:29:
85:80:09:c4:bc:8e:f6:d5:1d:aa:7e:1a:e7:f4:64:57:68:7a:
fb:3e:f7:aa:57:34:d1:15:f2:7a:52:1f:4f:d4:d8:ce:43:ca:
fc:09:49:a8:0c:d2:fc:50:82:82:40:73:6c:e6:41:6e:ff:49:
df:0c:d8:45:6e:2b:c8:4e:b0:fe:fe:63:d0:aa:27:a6:17:f8:
ac:9e:0e:8d:3f:3e:f3:bb:83:f4:e3:80:13:dd:35:b5:31:46:
0d:e3:4d:9f:c7:cd:6d:8c:0a:34:db:9b:d0:94:79:99:b7:36:
a2:8f:e9:6e:a8:1d:84:45:f3:66:ba:3e:ab:03:04:fc:a7:d2:
73:b6:01:58:c2:2a:b8:21:ab:f3:93:da:cf:06:83:76:d0:eb:
2b:1e:df:6a:cc:69:6f:31:53:37:ac:5a:a3:c7:d5:85:58:4c:
2a:21:54:c2:86:9c:29:11:4a:5d:01:2f:87:dd:a8:34:8b:90:
1c:3c:ea:1e:fb:31:ce:38:10:17:e6:d2:5d:0c:e4:a0:3d:9e:
4d:08:69:04:db:16:38:86:73:f7:a9:41:bb:d3:36:6e:4d:7d:
65:43:f7:af:1a:87:94:6b:af:c2:d0:8e:ca:08:d0:84:0b:2e:
be:3a:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:46 2026 by rpki-client