Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: jZ6F1152J+MWK/6mA0tbyeXw8qzC+ZKlhuvM+94c3KA=
Subject key identifier: 49:91:CB:FD:FB:5D:4C:0B:A4:BB:1A:D2:D8:5E:8E:02:A2:6B:F1:E0
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019CE636337ADDE3B794C17B6E78CAB78A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 136C
Signing time: Fri 13 Mar 2026 08:00:37 +0000
Manifest this update: Fri 13 Mar 2026 08:00:37 +0000
Manifest next update: Sat 14 Mar 2026 08:00:37 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: JGhBxFiQ6q6bTuDaP6FjtT8jxfmR2vnqkxL5G5fhgQk=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:33:7a:dd:e3:b7:94:c1:7b:6e:78:ca:b7:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Mar 13 08:00:37 2026 GMT
Not After : Mar 14 08:00:37 2026 GMT
Subject: CN=4991cbfdfb5d4c0ba4bb1ad2d85e8e02a26bf1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:0c:63:fe:3a:b0:7b:12:db:58:80:ff:09:
5a:37:51:2f:97:d8:9c:fc:a0:f9:54:99:1b:83:12:
17:d4:f4:9c:fb:8c:f3:39:4d:85:75:a3:42:98:91:
62:0d:ab:39:be:a5:ea:ef:08:e2:5f:4d:0c:e5:b6:
57:cb:0b:fb:5e:b5:c6:e6:8a:71:e2:39:75:08:43:
f1:de:23:75:eb:62:87:31:e9:9a:57:bd:c4:2d:4f:
b1:88:8e:2c:39:bf:7f:9c:1d:31:23:b3:3c:1f:93:
f1:01:c2:6b:85:6a:c5:cc:91:48:76:5c:3c:ab:1e:
d2:2d:11:ab:c9:df:8c:32:53:ec:e0:b4:96:03:f7:
28:ab:02:27:67:10:66:79:3f:a9:af:cc:2d:1b:23:
aa:8e:4d:23:68:c6:1a:90:88:48:e0:41:3b:dd:70:
f2:6f:40:ad:71:ff:a9:7d:92:98:8a:a0:e1:c9:ad:
e7:91:68:f1:f3:fc:99:8c:36:d9:b6:bd:da:cb:17:
62:01:ea:d9:b7:cd:ac:2a:b9:b3:ad:e0:ce:60:8e:
79:8c:d1:dc:d3:ad:7e:15:83:3f:ad:87:12:46:fd:
a8:e9:c4:d1:c1:ef:de:13:3d:c9:12:2e:20:80:49:
de:49:26:45:db:bd:ec:ae:9e:3f:11:74:17:a4:86:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:CB:FD:FB:5D:4C:0B:A4:BB:1A:D2:D8:5E:8E:02:A2:6B:F1:E0
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:23:76:c6:f3:9b:40:1f:93:35:59:d8:38:49:26:ce:0a:bb:
80:4f:30:2b:cd:59:cc:56:3b:d0:35:a9:77:32:ba:9d:49:a8:
f0:04:52:a3:15:94:e6:04:e0:45:71:1b:1c:e0:42:58:27:bd:
d6:90:ab:19:ec:3f:c4:da:56:e4:be:87:15:0b:c3:05:fc:c5:
6d:d7:a3:4e:a8:b8:22:4c:07:dd:26:b4:2c:b0:29:dc:65:90:
e0:80:3e:04:7a:3e:65:4b:6b:2f:2b:ce:89:99:0f:a1:6b:34:
68:79:a6:d6:a7:37:ae:32:cc:6f:f7:f4:a8:4b:2d:3f:e3:f6:
e5:3f:83:6f:e6:28:d0:71:12:32:46:2c:a3:3e:9d:49:31:24:
48:21:66:b9:6b:b3:4d:86:5f:07:80:4f:23:d9:83:cb:f2:ac:
c0:6f:d1:99:c2:63:f9:d4:15:01:df:df:10:0e:ee:f0:53:82:
d1:a8:e9:68:76:35:d3:3f:0e:79:5e:26:e5:43:1c:b9:56:2d:
bf:fe:85:9d:67:15:ad:f9:e0:a0:b5:06:b8:26:59:12:15:52:
eb:30:57:d3:5f:de:1b:e5:5a:dd:f9:02:3e:30:e6:2d:ef:c7:
8f:82:42:06:c5:ef:00:42:f1:bd:b2:c1:4c:39:d2:24:95:15:
23:1e:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:57:26 2026 by rpki-client