Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: w7xZr0xscEQEmgCUX1MbdefT0p35gV2U/GQekkkEq6w=
Subject key identifier: D2:AB:7F:9F:85:F2:D8:CD:F4:67:D0:F8:1E:52:CF:D6:4F:53:AB:7A
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 019D37896889C33DF9827928754C77DE6D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 061D
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: dTnyHu7c5lmZ5YWNquE3Gp7QhhU.roa (hash: dYbqxC2rCCWq/yRZ4yUkpOLINJDRJe/smtZyFeEbLZs=)
2: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: RvCnQgRQ9xvMFhfh8/EqihXAh0ftqO8uNiDWUm8X6+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:68:89:c3:3d:f9:82:79:28:75:4c:77:de:6d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=d2ab7f9f85f2d8cdf467d0f81e52cfd64f53ab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:65:eb:6c:02:00:e4:6c:55:47:c9:f6:a1:
62:6b:ea:1d:78:49:0f:1e:59:0c:2b:03:e1:50:33:
29:f0:07:e7:50:fc:72:0e:32:27:60:5d:18:ec:77:
9b:10:8b:67:cc:58:5a:3a:60:73:ee:bf:7e:26:77:
c6:fc:1d:91:76:f9:0f:d4:eb:29:e6:68:e0:e5:3c:
cb:8c:de:63:66:75:a7:f3:e3:42:f7:6c:fb:20:62:
bc:93:cb:31:ba:e1:c6:fd:c8:32:9f:a2:c6:9d:43:
3b:4a:93:5c:a4:7a:cf:f9:c7:ad:64:46:33:5d:e0:
ce:fa:fb:c1:5d:f8:75:6f:19:ef:0e:fb:6b:6b:34:
7f:74:7c:07:9a:59:4c:03:6e:e3:4d:10:f5:ff:a4:
bb:35:06:55:60:57:ed:ff:43:2b:ed:28:f4:44:8c:
67:8a:25:37:5a:33:a7:7b:23:71:ed:72:72:99:60:
cb:30:1c:40:4b:c0:15:5c:1e:fb:ef:9e:35:c8:2d:
d5:6e:16:e7:07:d6:3b:7e:3a:5f:25:e4:fb:0c:40:
6e:67:51:86:87:d6:65:83:ab:b1:e2:f0:de:e7:66:
2c:67:ed:0f:b1:3f:c5:7e:11:79:03:a8:12:a9:24:
fa:fe:6c:38:98:3d:6e:ac:79:5a:57:4b:f8:86:35:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:7F:9F:85:F2:D8:CD:F4:67:D0:F8:1E:52:CF:D6:4F:53:AB:7A
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:43:28:29:6d:7f:46:f7:52:40:fb:33:96:90:2a:87:b5:
03:d5:b0:2c:92:94:66:8d:3e:ab:94:45:b7:3c:56:4d:28:fe:
07:f8:1d:bf:b7:91:71:f3:61:85:03:34:96:c2:ed:21:d5:93:
8e:5d:4f:5a:2a:30:0d:78:e4:78:6f:82:4a:11:53:15:50:68:
5f:8e:0a:b6:84:5c:75:53:10:c8:eb:2a:b0:d4:ae:b8:f2:a8:
c7:0e:48:41:e5:56:3e:a1:12:47:f8:f6:0f:2a:b5:39:16:e8:
9f:19:32:4e:57:38:83:27:7f:9c:e7:09:f7:0e:de:fb:9f:71:
77:04:e6:b2:de:a7:17:c3:59:47:d9:b1:1f:23:56:4e:54:23:
91:1a:5a:a1:e2:8e:d1:56:c5:7b:a4:70:d6:db:70:cc:d3:10:
20:f4:45:5f:67:6c:34:05:9f:5a:17:8b:33:3d:ba:53:e3:21:
a9:79:67:54:c4:c8:3c:08:25:54:b3:fd:16:d9:fb:a3:47:ba:
ad:0b:0e:34:89:3e:2a:3f:dc:7c:42:67:d4:b1:63:ff:5a:f1:
51:11:11:17:c8:a9:e6:1b:75:ce:d6:bf:dd:f2:1a:9c:7b:6a:
e2:e1:02:7a:6a:df:a8:9d:3e:6a:01:71:af:a1:d6:9b:b5:37:
17:03:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:34 2026 by rpki-client