Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json)
Hash identifier: /R+MmbzLxTHgxLO/HfcvkvM+eg1gynnljtJqQRwwGC4=
Subject key identifier: 56:43:27:7C:C2:DB:F2:B8:8D:E6:FD:8A:1D:9A:33:CA:DF:81:85:0E
Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Certificate serial: 019D38D32859EAD31F353355159DC875FAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
Manifest number: 018F
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: eLMuUlWzfjAKf4EwEZPVulzdGQpC7Je2sL2t412w5d8=)
2: xlffALi4uBOFmreXz8haweCZNck.roa (hash: 3wXdfGigS71aUdPX9RI8m2mtTK/gKdzEh9NGf1XtL2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:28:59:ea:d3:1f:35:33:55:15:9d:c8:75:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=5643277cc2dbf2b88de6fd8a1d9a33cadf81850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:b4:ba:3c:cb:3e:a9:57:56:1c:0d:a0:55:
6a:4c:27:5d:be:97:28:af:84:7f:4a:54:03:29:f5:
bf:91:2b:b6:58:51:5c:06:9b:4e:0b:e2:ec:a5:0e:
53:61:a0:36:79:37:ba:6e:75:1a:8b:b4:88:b1:6c:
01:6c:c6:d6:44:14:da:35:d6:e7:0e:ac:44:ee:66:
a9:fa:73:33:ee:b8:6e:e5:15:30:bd:35:16:1c:b2:
81:d0:6c:70:ab:0e:b4:ff:bf:8f:f2:15:71:21:df:
43:61:a7:d2:20:58:f3:e1:b9:16:9b:dc:1e:e6:80:
6d:7f:1f:a2:22:e3:80:dd:9d:6e:c0:24:fb:64:cf:
05:7d:c6:58:4f:fa:6a:ea:88:20:40:42:82:ed:66:
70:f3:34:2f:a4:44:29:cc:2b:ae:ff:14:de:9e:cd:
cb:91:d9:11:22:d1:a5:93:1d:f5:64:8d:2c:18:0c:
81:03:ce:46:84:aa:81:5e:7f:a2:6b:25:89:94:ab:
af:31:cf:2b:4a:b0:29:41:64:20:dd:b8:9d:41:c0:
b3:0d:74:c8:b4:3e:05:53:c5:d6:1f:54:df:21:fc:
aa:e2:dd:f6:17:14:54:c7:55:11:1a:21:fc:d1:64:
40:ed:5b:fc:7f:f2:ff:53:f7:90:1a:ee:6c:7f:2b:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:27:7C:C2:DB:F2:B8:8D:E6:FD:8A:1D:9A:33:CA:DF:81:85:0E
X509v3 Authority Key Identifier:
keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:95:f9:81:47:83:ae:9d:32:99:8b:86:45:a7:79:60:66:
96:be:94:bb:29:86:7a:a3:ee:7b:e3:59:40:23:db:66:34:94:
72:8e:6d:6e:4b:07:5d:13:57:6d:da:b0:0b:77:fe:70:fe:91:
4c:37:d9:f9:31:b5:3d:98:72:b8:2d:30:53:5e:af:c3:be:75:
f6:22:60:e0:1b:4b:2a:25:bd:b6:eb:84:8a:8b:74:b6:e7:a0:
fd:93:13:30:a1:fc:92:42:e3:ff:52:1a:92:05:7b:f0:14:1c:
c8:d5:6b:ad:00:9d:15:69:06:a9:4d:67:ac:b6:42:48:58:7a:
95:8e:16:2d:62:49:72:1b:d1:50:e8:40:fd:ac:7d:e9:71:84:
88:27:4f:fa:27:56:5a:45:91:3d:83:00:59:24:d1:4c:73:91:
6e:c8:5e:61:45:24:81:cf:0c:7f:43:62:c6:01:d0:a3:72:fb:
45:eb:54:27:9e:ba:9e:42:c9:e2:d9:2b:55:50:64:73:df:24:
b3:de:4b:84:97:1e:f4:31:6f:2c:67:36:66:cc:3c:89:1a:48:
34:53:c1:c4:cc:e5:f6:9f:02:e5:ec:8b:5c:81:b5:e2:7d:af:
de:86:ec:7b:ed:46:3b:2d:7a:2b:ea:4a:3b:bd:3c:48:9e:b8:
06:2a:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:22 2026 by rpki-client