Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: 0v+sQFhDWY8qfbcG/WxoGSCn75Yt7ORO4E9bEL+awao=
Subject key identifier: 78:98:6F:F7:46:54:A5:F2:5E:A5:1D:AF:BC:56:6C:7F:77:83:86:03
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 019D37533B519A4A3ECBD47685367BCB0986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0FC9
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: s6n6v1krB9pXx2MmmVOk8DFa7gYPgsI8wuNpriMNf5M=)
2: _EAdbKIlNCwppTUnYtOH719X6EU.roa (hash: Jm0d38jKbNV/SfdJd3VVcUEtQMJ+UWyy4HHgcaknpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3b:51:9a:4a:3e:cb:d4:76:85:36:7b:cb:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=78986ff74654a5f25ea51dafbc566c7f77838603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:a9:2e:6a:b9:6d:a0:57:58:7f:bf:0a:31:
e0:f2:15:4b:7b:f8:55:a3:62:17:f5:2a:75:75:b1:
0f:de:4c:9e:ab:cf:f4:cb:8d:fd:9d:a3:6e:3a:9e:
3b:b0:3f:c6:e5:e4:6d:51:04:01:5f:e3:02:31:20:
8e:ab:cc:da:27:da:e7:12:67:8a:2b:45:71:ce:72:
cb:a2:d8:4a:bb:70:45:8c:a4:d5:dd:1c:ff:b2:9d:
92:ee:8a:26:05:8f:0b:2a:ed:3e:dd:1d:16:e9:83:
83:76:c5:f5:e4:bc:aa:81:75:45:88:8a:2a:ec:85:
2e:47:12:e2:e7:e2:36:6f:38:4a:3b:e0:ef:77:0e:
82:49:a4:4e:2d:d2:90:bf:49:b6:22:ab:83:9f:e9:
26:eb:07:c7:ae:01:ed:a8:a3:d7:d0:32:35:ec:74:
5b:d6:d8:2c:df:0c:fe:e9:eb:04:27:f7:4f:2c:cf:
e7:50:0f:a4:28:ff:55:8a:05:0a:9e:72:b8:f3:98:
45:2a:37:c4:09:75:5f:e2:b5:2f:18:66:09:13:c4:
a2:c1:f9:f1:82:11:11:50:ad:5f:f0:78:73:5c:78:
87:bc:a7:46:9e:ab:1b:4d:5f:14:72:8e:7d:73:4c:
10:b9:bf:30:54:7f:8d:24:80:66:5e:31:c0:32:4e:
52:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:98:6F:F7:46:54:A5:F2:5E:A5:1D:AF:BC:56:6C:7F:77:83:86:03
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:59:05:8c:66:bd:df:24:f5:59:d6:d2:d1:e0:69:a9:b7:7e:
7e:a4:63:e1:57:53:7b:72:1a:7e:1f:1a:15:99:79:3b:31:19:
a9:8c:20:9e:eb:7d:df:b6:93:59:43:3d:24:f3:21:b9:08:64:
32:09:54:82:ef:72:ee:36:72:1a:d6:82:e3:de:e5:da:f9:21:
e7:29:16:12:97:20:62:ff:04:32:2b:e9:90:b3:1a:e7:9f:32:
16:e2:0e:a9:15:48:03:ec:94:ae:0b:16:c9:8d:a6:08:c2:4c:
76:8a:06:ea:64:08:9f:ba:61:a0:9e:ab:7d:19:e7:4e:0d:48:
01:a1:69:9c:bf:51:66:d1:50:16:b7:14:64:ab:35:e2:9a:64:
46:50:88:8a:c4:4b:01:31:ef:89:2e:7c:55:0c:48:1f:27:fe:
04:1b:c5:c7:ea:d6:98:cf:9f:5a:fa:fd:87:fc:dd:88:f0:53:
d9:30:5b:22:83:5f:36:62:d4:fa:e4:d6:0c:e4:65:1d:2f:49:
65:c7:aa:35:5f:9f:94:df:e9:93:dc:0b:45:3b:82:a9:1f:f0:
b6:24:e4:6d:01:83:d3:7e:09:f6:d4:c2:89:b5:f4:13:fd:89:
93:f0:47:b0:fb:f6:cd:88:ab:b3:6d:c2:45:17:29:81:27:73:
31:f6:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client