Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: 4S5SQrkMXyy/OErM/Svm3GTTjONT+heMla4Yd79S75Y=
Subject key identifier: D8:90:68:F6:8A:53:7F:9A:85:3B:D7:69:8A:1F:9E:DB:8D:50:B0:1A
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019D39AEC20D9D9633E08C0ADD5819B2433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 11A6
Signing time: Sun 29 Mar 2026 13:00:47 +0000
Manifest this update: Sun 29 Mar 2026 13:00:47 +0000
Manifest next update: Mon 30 Mar 2026 13:00:47 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: OWBJx2fSxq+Gb/zhR1gLWeOIyBYgz2i8+pqRIrewpCE=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c2:0d:9d:96:33:e0:8c:0a:dd:58:19:b2:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Mar 29 13:00:47 2026 GMT
Not After : Mar 30 13:00:47 2026 GMT
Subject: CN=d89068f68a537f9a853bd7698a1f9edb8d50b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:e2:95:3a:47:b8:6b:8f:75:eb:9f:56:3f:
5d:e5:8d:f8:87:57:db:25:bb:bc:16:5d:98:30:24:
39:7f:08:0d:04:28:41:31:95:1e:c3:d6:48:b9:f5:
4b:5b:f5:a3:12:66:85:41:cd:2a:e4:72:e4:bf:1b:
bf:54:b1:37:31:ce:7e:59:b9:0e:78:ec:dc:15:f2:
32:4a:e0:d0:09:fa:89:bc:fb:81:9f:dc:21:e3:6d:
a2:4f:db:64:6f:11:fa:e2:5a:58:49:18:06:b1:97:
49:6c:d1:81:2f:d6:64:6c:2f:13:f4:0e:a2:63:e8:
5f:d6:8b:af:be:24:06:d2:04:85:3e:d0:d5:85:0f:
e5:c3:7a:a3:b9:d7:2a:6d:28:56:1a:64:6f:66:b3:
73:b8:b6:b0:d9:94:50:6c:a8:29:76:35:07:02:06:
22:c0:71:be:3d:3c:69:db:e7:01:99:00:80:83:bd:
2e:b4:f0:a3:aa:e2:12:65:f1:8e:c0:5e:da:18:16:
95:ac:ec:33:55:84:96:e1:1a:e2:f2:3b:9d:23:99:
bf:e3:9c:af:45:90:9e:df:be:99:fa:9f:e5:ec:e7:
89:71:8b:22:80:21:1b:88:40:c7:e5:a8:3f:cf:3f:
72:4c:89:32:3f:48:d5:cd:aa:1e:df:bb:55:13:77:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:68:F6:8A:53:7F:9A:85:3B:D7:69:8A:1F:9E:DB:8D:50:B0:1A
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:a9:c5:f9:13:d6:5f:bb:c4:af:34:1f:1f:d6:f8:68:cd:
e2:13:6d:ea:8c:40:f2:ae:31:1b:be:57:c3:07:36:e8:4b:96:
63:d0:51:ac:7c:65:d2:62:f0:cb:43:98:86:48:1d:e1:67:00:
8c:9d:61:39:36:64:b1:9e:ec:09:f7:66:91:bc:35:a3:6b:1d:
a7:c1:18:e9:fa:d5:01:5e:46:7b:e1:32:22:d6:f7:95:01:2a:
dc:3f:20:c4:71:d5:2b:a9:e5:f1:f5:95:8d:42:29:f9:21:78:
a6:09:0f:4a:d5:9b:99:ef:95:48:09:3b:67:50:f9:c8:81:7f:
7a:e4:59:9e:17:dc:29:8d:a1:cc:1b:c6:12:cf:5a:a9:6f:ed:
e1:30:75:fe:72:91:ec:88:c0:6f:5b:7f:bd:42:8e:f2:44:e4:
aa:54:84:6e:e8:70:08:c7:b6:1e:ae:23:01:f2:44:4f:6c:d2:
68:bc:b0:89:b2:21:b8:f9:db:f6:f5:4b:d7:95:a4:67:f9:0f:
ba:7d:8a:ce:cb:60:54:0b:f7:1e:98:b4:f5:80:53:6e:0e:0b:
24:23:3c:59:f4:f6:c9:a0:19:6a:a0:a5:4a:89:d5:d3:a8:70:
89:1f:e6:e9:98:7e:31:79:bd:0f:10:8b:6e:5a:63:66:1c:b7:
fd:4a:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:20 2026 by rpki-client