Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: MXxu/6/Mn57cfiThc9sJ15KaWXedXndYY7zuA13FaIg=
Subject key identifier: 3F:4B:EE:0C:81:62:3B:00:56:44:2F:1D:35:24:65:C0:CC:3E:8D:F7
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019D389C3D2053211D863D1734C31A2A6DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 13D0
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: kXOpGlvkvacMvou0JAZZlS9Ig9r3n2qB32wPzOuUiOw=)
2: ChsrIe_cFwpAiazbN6fxpmLK7t4.roa (hash: LuQhPrdzKvZLID91e7AArGX99lU+Hh7zxpmaut21ffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3d:20:53:21:1d:86:3d:17:34:c3:1a:2a:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=3f4bee0c81623b0056442f1d352465c0cc3e8df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:ae:3f:d2:02:ba:80:d1:e1:d2:48:67:b6:
f9:06:41:b8:10:68:75:25:83:19:6c:c0:38:9f:71:
cf:a2:10:68:84:7f:bf:9c:a5:ce:ea:3f:08:dc:34:
73:ea:b5:d4:fc:65:96:f1:d9:73:4e:20:f5:32:35:
20:3f:ac:6a:e4:fc:a9:0f:9a:55:c3:6d:09:c1:61:
f9:a9:4d:78:7f:b7:c0:30:ac:1c:a2:81:d8:a0:ad:
24:c9:52:45:c2:cf:9f:60:71:2f:d4:71:35:4c:11:
40:e3:ad:91:0b:07:14:4e:35:6d:dd:e0:8a:e2:be:
70:03:6b:dd:c9:21:63:77:b8:22:9a:bd:ff:e5:9c:
d9:df:61:a2:46:9a:76:4e:03:c3:5b:36:f7:c2:3a:
f2:ee:09:8b:4f:b9:d3:ee:7d:c4:08:98:80:91:b9:
9c:b1:77:0c:c2:a6:22:2b:67:e5:76:1d:2c:0b:55:
a9:b6:f7:2b:d9:eb:d9:38:a2:d0:c5:eb:c2:76:cd:
6c:65:bb:a1:ae:68:3b:1e:21:0a:7f:0a:b9:31:94:
e6:87:91:02:63:84:95:e7:d1:7d:e1:f2:c2:03:a9:
61:0d:fc:67:7c:65:9a:d7:20:fd:15:df:16:5e:44:
80:94:60:ab:5c:eb:23:e9:1d:d8:5d:f5:8f:40:c5:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:EE:0C:81:62:3B:00:56:44:2F:1D:35:24:65:C0:CC:3E:8D:F7
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:67:db:05:02:7d:af:6f:0e:e3:d5:95:1e:73:97:c7:12:8d:
00:55:4f:6e:43:75:32:36:a1:ae:5c:1c:bc:7c:36:cd:bd:31:
c9:5b:70:67:a7:10:de:a6:26:0b:c7:cb:ee:35:a2:48:b9:5a:
4a:d0:39:2e:ad:8c:9b:89:df:14:40:6d:d9:02:67:8f:fd:be:
43:9d:87:7b:86:0d:95:5a:24:de:13:72:57:84:05:86:e3:1a:
c0:f5:6e:df:a2:7e:fa:34:b2:f8:89:46:2a:49:9c:cd:f4:0e:
9b:26:7d:95:c3:58:0c:7a:e9:d7:ec:24:d2:a4:9b:4a:20:79:
b3:a3:ed:cc:95:30:7b:16:de:49:45:17:47:dc:1f:08:19:2f:
ef:1b:e9:ae:d3:db:6e:2a:08:dd:ef:2a:e7:31:09:13:60:4b:
96:c8:8d:9e:44:7c:a2:60:70:67:3b:0e:51:64:19:e6:9a:90:
75:29:63:41:61:3d:b9:4d:24:b6:8c:76:80:d2:75:ec:e3:64:
12:98:97:fa:ba:56:ad:32:14:b6:ee:22:c6:b8:6b:66:ed:1b:
6e:e4:65:26:87:bb:dd:8d:22:6e:06:fb:4f:94:18:35:53:85:
90:41:d0:de:30:f4:30:c9:8c:ca:da:68:8d:2c:d9:3e:cb:4e:
05:67:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client