Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier: EFBOuTUhgMVR24I0zrG0ub5pYganrJxxhXK8tlgDwkI=
Subject key identifier: D7:CB:2A:B5:33:82:0C:3D:A9:E4:A2:1A:02:A6:E0:46:9F:DF:A3:89
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 019D39E53FF3D12C3CCE290ED216B6E73755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 14:00:18 +0000
Manifest this update: Sun 29 Mar 2026 14:00:18 +0000
Manifest next update: Mon 30 Mar 2026 14:00:18 +0000
Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: B5HQQrDpzoB/JlbDDqeYzNmk5qh5YOQXai3eOn1Yd6U=)
2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=)
3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=)
4: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=)
5: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (hash: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc=)
6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=)
7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:3f:f3:d1:2c:3c:ce:29:0e:d2:16:b6:e7:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Mar 29 14:00:18 2026 GMT
Not After : Mar 30 14:00:18 2026 GMT
Subject: CN=d7cb2ab533820c3da9e4a21a02a6e0469fdfa389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:aa:2f:d2:4e:71:78:46:50:2a:91:25:fe:
f2:dd:69:ce:21:48:5f:e8:52:a4:21:72:e5:49:27:
7a:f6:6a:74:e5:a9:3e:30:85:36:78:df:35:dd:59:
f5:30:1a:b7:ed:31:b9:2d:54:02:0d:02:b6:cc:ea:
b9:1f:9a:79:e2:73:d1:65:3f:07:40:27:27:24:8c:
dd:28:99:d9:db:c2:0c:b9:dc:0b:6e:08:8b:17:1a:
08:5c:81:96:25:06:d0:29:57:b2:5e:2b:e2:47:37:
46:e0:16:ea:75:18:8d:37:25:b4:55:10:05:9a:b7:
86:d6:f3:3a:4b:e5:36:19:fe:b8:8d:05:60:9e:a0:
2b:96:fb:fe:12:17:62:6b:9f:80:4e:b9:dc:eb:82:
fb:cf:88:f7:bc:d3:2f:53:e3:11:a3:58:f5:16:d8:
d4:8e:c4:ee:52:02:0a:8d:a8:0b:ab:0f:ea:b7:f0:
18:bc:2a:de:8e:cd:43:f1:70:b9:f4:97:6c:e9:55:
46:8b:0c:d9:c6:f0:1e:be:a3:c1:85:b0:fc:3c:ab:
30:ec:fd:0e:bb:2f:6b:3c:65:a7:b8:42:bf:e4:1e:
06:6a:65:48:40:70:84:24:4f:b8:0d:8a:b6:d6:48:
fd:0b:eb:4d:8b:0a:8e:f3:b7:80:92:ee:af:b4:54:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:2A:B5:33:82:0C:3D:A9:E4:A2:1A:02:A6:E0:46:9F:DF:A3:89
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a4:bf:4b:f7:33:cc:ac:08:17:57:ec:af:9c:ca:03:ed:8a:
e0:29:cd:68:03:de:81:b1:93:b3:00:8b:95:84:01:ce:0d:9f:
6f:a0:9d:27:fd:7c:a1:94:68:3d:44:d9:8a:fe:72:be:57:52:
06:49:9c:e4:85:9d:ea:54:0d:75:4b:9e:08:7c:15:b5:b0:d7:
60:63:56:92:96:e7:00:8e:ac:80:b0:47:ba:af:aa:16:f9:a6:
92:f1:44:ba:23:b1:30:76:3c:32:ca:a5:1e:a2:9f:4e:e2:d3:
55:8e:9e:25:fe:b5:c2:a3:60:e6:7e:90:5e:e4:d1:eb:5d:36:
92:01:40:da:28:c9:f3:64:c4:2f:ac:17:91:d3:33:9e:30:d6:
93:6e:73:aa:62:a4:eb:7d:85:1d:47:47:93:b1:06:2c:38:54:
6e:34:20:c8:b5:6a:71:79:b7:d8:05:41:69:8b:07:8c:ac:82:
87:41:3f:fb:11:7f:00:d2:e0:26:99:fb:3e:89:88:d7:1e:e8:
e1:d0:97:e9:86:67:f0:0c:37:ad:89:9c:33:20:ef:ab:5f:96:
b3:59:47:e7:95:11:3d:57:4e:c4:04:11:91:a0:1d:41:1c:ce:
18:d6:93:94:fe:b7:fd:2c:09:74:90:ec:b7:10:cf:71:d2:92:
ea:0f:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:46 2026 by rpki-client