Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: TJai3X8K49YLT9bSJwg0H4L4u+5n+J5P8nlae51vwVI=
Subject key identifier: 50:76:CE:82:3C:B7:53:83:CF:74:B0:BA:23:F5:81:28:17:A1:00:85
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019CE3355BC4E9385E1C601A05252547FB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0407
Signing time: Thu 12 Mar 2026 18:00:50 +0000
Manifest this update: Thu 12 Mar 2026 18:00:50 +0000
Manifest next update: Fri 13 Mar 2026 18:00:50 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: y0/jALgG+GyluH+wF5/SknU6rsAA5YYlxn+TRM+R/hI=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: epxl9L9HWnrGUI5XuexvyGVngTU.roa (hash: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:5b:c4:e9:38:5e:1c:60:1a:05:25:25:47:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Mar 12 18:00:50 2026 GMT
Not After : Mar 13 18:00:50 2026 GMT
Subject: CN=5076ce823cb75383cf74b0ba23f5812817a10085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:96:3d:85:3b:b3:ef:53:c5:ca:dc:f2:97:
bc:22:b4:6b:8d:74:92:91:e2:4d:7a:51:53:77:e2:
68:8e:30:fc:09:ba:0d:aa:b0:4e:b0:61:45:89:49:
1a:89:a3:54:fd:4e:57:fe:61:1e:84:64:b3:68:f7:
b3:23:30:6f:0f:5e:24:48:41:f1:ca:93:c7:98:ed:
ce:49:e1:ed:33:a1:a0:ca:8f:5f:fa:50:1e:f6:6d:
fa:6b:b1:b8:d3:49:8a:30:f1:b6:5e:75:49:92:d3:
47:0e:b8:02:91:52:c2:29:22:28:d9:74:73:31:eb:
d1:a0:fa:ff:fa:07:71:e6:b7:39:d6:c5:0b:83:b9:
ef:95:42:d2:28:31:e0:a8:01:24:49:f2:62:77:7d:
a4:9b:a1:b5:74:20:34:cf:3a:2a:1f:cb:27:79:18:
16:1d:cb:ed:61:39:f1:f5:fa:c8:a3:fa:76:9c:bb:
92:b8:0f:5f:c8:0a:cf:eb:22:03:a7:e0:6e:d8:4a:
06:fb:ec:12:52:61:8d:3b:ab:aa:e1:6d:0f:77:e9:
48:fc:38:61:1a:c1:38:2c:5b:58:02:5c:00:aa:fb:
15:4b:fa:1d:56:26:d6:f6:88:0b:23:b0:67:ba:37:
9b:5c:cf:ec:ad:5a:4b:aa:89:0d:0c:66:90:10:14:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:CE:82:3C:B7:53:83:CF:74:B0:BA:23:F5:81:28:17:A1:00:85
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:30:4c:3e:fa:84:87:19:92:d9:83:8d:c0:5d:9d:77:5a:
8a:91:5f:7f:b0:e8:6c:ab:22:91:d5:fb:62:3e:01:fd:7b:56:
8d:78:4b:8c:f7:8e:c5:7e:fe:42:8c:b5:80:73:b5:26:b4:af:
4f:9c:e9:03:98:6a:e3:f9:6f:23:7b:a3:b3:9b:0e:be:ea:f3:
ac:92:cd:04:ed:cf:54:f4:0c:92:f3:6c:e0:5a:86:c7:a1:4c:
e2:61:8f:4d:78:c2:18:17:c0:39:65:4e:8e:83:d5:95:a2:7e:
d9:d3:e0:53:00:98:02:5d:e3:47:b1:68:fa:d6:2d:2d:bd:0e:
23:44:eb:3a:22:d3:15:a6:60:ee:70:c3:af:a4:01:27:e7:cf:
88:dc:2c:b0:f2:68:9a:e8:32:bd:1d:b2:5a:8b:7a:fa:f9:f9:
3f:aa:97:75:6e:30:7b:3e:14:68:6b:94:27:2b:46:ad:4e:c6:
b4:03:5d:fc:7f:5e:72:e8:44:bb:de:3d:65:4a:aa:e2:59:17:
7c:52:22:02:31:7e:21:ea:63:2f:2c:4a:1b:fa:6a:ac:63:e4:
69:11:38:79:47:ed:06:23:9a:32:a3:73:23:e5:c2:37:6a:cc:
ac:55:43:6a:37:2f:10:40:aa:82:48:52:f3:08:58:5c:9b:3f:
00:09:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:49:16 2026 by rpki-client