Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: qusGQQDthgAaVcRNOESe1Y73eRHHyEBuPpy6+goKKI8=
Subject key identifier: D9:93:0E:84:A1:7D:99:D8:8A:53:D6:24:BA:66:BB:77:47:74:65:D6
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 019D38D2CE64C12622C69703231E08168EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 1711
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: k/D/acGL7bPnB/Ro8mRhYbXdd9TSBAwFeJmmJEBvZxA=)
2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ce:64:c1:26:22:c6:97:03:23:1e:08:16:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=d9930e84a17d99d88a53d624ba66bb77477465d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:08:be:89:df:9a:95:73:9a:1c:41:83:a1:
c4:44:d1:b1:35:b3:72:bc:cb:55:6f:ff:5d:44:c2:
25:da:36:b8:f8:1c:16:19:31:fc:21:f8:59:6f:29:
ab:a3:80:4e:f8:b2:cd:ba:5e:78:c2:7a:3c:ab:4c:
7b:2d:27:9e:66:f4:d0:89:11:a9:ff:cb:21:93:a4:
49:ea:0d:7c:fd:32:d4:49:60:5e:5c:59:cd:56:93:
0e:36:d3:b8:06:10:5f:b3:5a:de:40:9c:58:49:fc:
9c:ee:9b:11:e2:1d:2b:0e:ca:0a:23:a3:a9:4d:f9:
c1:85:93:0f:68:ac:5d:24:f8:ac:ed:6c:51:5e:7d:
67:77:55:20:ae:c9:bb:86:c0:5a:95:b7:78:5e:18:
13:2a:72:c4:e3:a6:45:42:77:d1:ac:59:4f:a5:8a:
a6:d8:4b:3e:b7:a5:f3:a5:3a:a2:1b:52:c8:54:87:
ff:5c:cc:52:1d:ca:2e:ac:ce:73:e0:6c:03:8c:78:
1b:d9:fc:9c:17:b0:07:0b:0f:1b:53:02:b9:7f:f9:
ac:aa:73:90:47:44:bb:5a:05:8e:76:e8:6e:50:91:
16:94:4f:70:bc:cb:ed:a7:8d:7e:1f:70:0c:c4:89:
1e:f6:b5:63:bd:d0:25:b0:b2:0e:00:ab:7b:f1:5c:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:0E:84:A1:7D:99:D8:8A:53:D6:24:BA:66:BB:77:47:74:65:D6
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:29:d8:04:9c:b4:6e:94:82:94:b5:26:66:48:b3:8b:c3:a8:
9e:b5:6a:f6:fb:d6:50:0d:e7:54:dd:59:d6:a5:b8:6f:7e:f0:
02:08:e9:21:c4:8d:3c:72:48:f2:c0:e4:42:de:81:bc:b6:12:
42:6e:5c:ae:9c:d0:f1:4a:5a:5a:0e:49:c7:ea:ed:97:78:15:
7c:57:f3:46:6f:17:db:e4:ef:4f:dc:35:8a:1a:16:fe:40:94:
fd:b9:5c:68:ec:b3:45:6b:78:af:58:2b:dc:46:71:0b:1f:b7:
eb:55:8d:3f:d4:1a:bf:c5:25:a5:16:9d:f0:0f:52:44:05:21:
3a:c3:31:74:41:96:5e:00:3e:a7:b7:90:ec:39:4d:df:b6:3a:
c2:5a:e0:e5:1f:f1:98:15:c1:89:97:8d:82:9f:5f:c7:e3:d9:
5e:dd:3a:87:e1:22:8f:fb:94:f4:1c:97:b5:c7:61:f2:a2:63:
6d:ae:58:cb:86:8d:f9:92:64:68:78:2c:b3:2d:ea:3c:82:9c:
9b:15:df:43:1e:fb:cf:a3:53:81:8b:38:2f:e6:53:ad:c5:b9:
45:8d:3b:96:0c:70:83:07:91:58:38:08:43:3f:97:89:d7:c1:
13:a2:18:9d:01:d3:3b:ef:2e:81:b5:aa:00:71:0a:5d:8f:f6:
8f:13:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:57 2026 by rpki-client