Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: KP5UxoQ3jIbbHM4bTmWft1tLf9F4+mpTn5J5B1LS3C4=
Subject key identifier: 45:85:96:5F:12:CC:0B:06:60:A3:15:C7:57:BF:7A:51:84:FE:59:AA
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019D3940FB4C74AF6ADDD1C299621970790F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0A65
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: l6oIC5RNvHwyK66IuVoayNTZoWiqJXNjttPWJ+UzJUI=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fb:4c:74:af:6a:dd:d1:c2:99:62:19:70:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=4585965f12cc0b0660a315c757bf7a5184fe59aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:f6:b9:6b:08:9f:08:ef:e7:3a:87:37:0e:
42:c0:a6:17:a8:bb:0f:9d:e3:d5:4e:57:4e:4c:28:
de:ee:75:4e:10:1a:73:87:cd:81:f7:53:af:ed:94:
04:91:a7:15:eb:bd:82:d6:f8:aa:80:40:c5:8a:f4:
f8:f2:c4:4d:7c:9e:4f:4d:c1:33:9d:e7:9c:fc:6b:
cb:17:d4:8e:37:84:60:cd:1d:55:e7:93:b7:1e:80:
1d:e3:93:d1:b2:d3:4a:e9:e0:0a:5b:c4:18:c8:f7:
81:30:1f:49:59:1b:8d:b1:a9:39:a3:9e:99:d9:a5:
d3:c3:e7:86:3e:5b:0e:05:34:2a:d8:65:f6:3b:61:
34:e1:e6:ee:ad:57:9b:b9:77:4f:b0:29:95:1c:a4:
b4:e9:3b:a4:db:b4:47:81:3a:36:1e:c8:cd:13:8b:
03:17:65:18:35:2d:89:9c:5b:88:d9:f6:54:93:05:
a1:02:68:76:75:e1:52:4a:e0:92:b5:29:c4:83:23:
cb:ec:ad:82:6f:73:2a:f1:77:1c:01:45:12:4b:44:
a5:79:48:21:df:83:2b:c6:db:af:e9:69:ba:48:03:
70:33:d9:5b:e9:ed:2d:4c:50:d1:29:0f:20:42:40:
3d:05:2c:f7:d7:ca:18:19:1d:9f:51:0e:0a:c1:b1:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:96:5F:12:CC:0B:06:60:A3:15:C7:57:BF:7A:51:84:FE:59:AA
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:54:b1:3d:a7:ee:3c:7c:e5:85:0f:a1:85:1a:e4:26:e9:
d7:e2:4a:49:98:90:27:b7:99:85:43:fd:6b:ed:d2:08:41:4d:
eb:99:24:10:5f:64:84:1a:5b:d4:b9:f0:72:b7:b6:ad:38:85:
3e:89:eb:92:37:f1:cf:2b:31:b2:78:b3:6b:e1:b5:1d:87:a1:
fd:cf:44:d2:19:1a:ad:9e:85:36:c1:96:3b:bc:6e:b0:ef:31:
76:9f:39:ab:c8:aa:87:ef:d9:3a:a7:dd:6b:34:60:99:05:49:
77:62:ab:bf:c9:8f:88:e4:c2:7f:96:c0:57:da:b8:4e:e5:0c:
c3:be:65:01:91:d7:b2:71:19:5d:58:68:bf:79:90:48:4e:dc:
36:28:7a:6d:9a:55:df:93:76:bb:eb:f0:4c:75:58:90:09:66:
23:3c:ce:0a:f2:9e:14:07:d4:bd:05:d3:44:5c:6f:83:e5:1c:
d3:c3:e2:24:11:7c:c7:ea:dc:b6:82:28:b8:91:42:4b:09:4c:
36:84:64:fd:ab:64:b3:10:60:ff:90:39:6b:f2:26:be:59:1f:
36:f0:0b:21:0b:f4:94:8f:5e:83:3b:27:25:07:5e:a8:ee:51:
cc:a3:03:70:7d:f2:f4:ed:68:df:89:05:42:5e:37:b5:09:78:
c3:ac:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:12 2026 by rpki-client