Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: Z68CCj1/k5imIw17DTF/hdT4F7JlfF9F/LlukoltLXI=
Subject key identifier: BF:F1:FD:B9:F8:2C:8B:9B:79:05:00:ED:10:91:DA:7D:0F:0F:0B:3D
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019D37C0352A43E6C573F7DFA736D886DE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 169C
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: 07ru83PVN/gQb4/zyKR07K08YKt3IkyF8fyV1IjzNtU=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:35:2a:43:e6:c5:73:f7:df:a7:36:d8:86:de:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=bff1fdb9f82c8b9b790500ed1091da7d0f0f0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:06:49:ea:df:7c:88:09:a7:4e:0a:81:02:
a1:49:dd:16:c2:6f:af:70:9e:30:01:f1:31:07:a4:
b1:a5:93:1a:db:98:94:25:93:5a:6b:60:3e:f6:1a:
a5:76:50:73:2e:6e:43:ff:06:16:97:0c:d5:aa:32:
be:48:7b:c5:f5:03:fb:14:99:1f:b7:95:61:02:54:
9a:5e:8b:91:74:70:e2:07:97:c6:51:ca:b8:f5:88:
8c:06:3d:09:d6:49:1b:6b:8e:fd:d5:e3:1e:f9:34:
22:c0:6a:80:78:b5:b2:45:e7:a4:ae:3b:05:6e:16:
23:0b:f1:4b:f3:da:b4:a4:cc:27:78:7d:a0:fd:c7:
6e:05:76:6c:f4:b8:db:68:b7:6a:b6:b9:fa:a6:13:
98:f8:e0:a1:87:a8:d0:0a:e3:9f:52:e4:cf:d4:50:
90:67:6d:14:32:46:99:fd:1c:03:2a:52:b7:04:4d:
26:39:e7:f2:40:88:54:76:1f:0d:28:0e:d4:3b:f9:
e2:2f:3f:71:c2:35:8a:f4:b2:6e:83:89:30:27:56:
2b:bf:c7:95:79:db:84:da:15:ce:65:55:57:76:47:
27:6d:3a:b8:3e:08:f8:03:5a:17:52:ac:d9:5f:f5:
c9:35:e4:3a:27:9a:6c:42:da:75:34:55:9a:db:14:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:FD:B9:F8:2C:8B:9B:79:05:00:ED:10:91:DA:7D:0F:0F:0B:3D
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5d:85:05:87:2e:c7:3a:4b:5b:ae:f8:cb:10:73:1e:ae:07:
42:da:6e:29:54:7f:ac:86:84:d8:a2:e0:26:e7:db:27:f6:bb:
38:b2:8b:a9:6c:d4:01:e2:6d:f0:03:9c:ec:4a:78:14:a0:a1:
f5:f2:90:37:57:e9:a2:e5:da:17:18:c4:ef:01:d8:ae:61:96:
f6:db:46:7f:ae:f1:74:06:95:a5:d2:e5:eb:7e:f5:1a:b8:69:
f3:81:3a:85:03:8f:ab:f6:d0:af:12:68:cd:39:59:ad:e1:be:
31:03:05:3d:39:19:65:dd:59:ed:63:b6:56:c0:74:d9:52:6b:
71:38:96:81:44:ea:3d:03:51:f4:a0:93:13:b7:b8:2e:b2:c3:
bc:ff:fa:09:59:62:95:8f:51:31:68:29:2d:b4:99:31:68:82:
ed:d1:03:9e:7e:e5:54:d9:8d:71:99:0b:0f:3a:a2:b3:18:17:
d3:a6:22:fd:9a:04:ce:96:82:6d:f3:62:b2:00:6a:ab:95:4f:
a6:fb:92:a5:31:62:0c:a7:fe:4c:9f:76:82:7b:43:0b:5f:ef:
23:c3:08:e7:c0:20:f7:48:73:0e:db:b7:53:fa:b1:aa:f7:4f:
01:a1:3e:07:b5:53:02:22:ac:fb:0e:47:cb:90:59:4a:32:40:
cd:0b:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:49 2026 by rpki-client