Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: kJEPTBm0q6/h+KGKM1UpBTsn9pJb751ZpTbYDHbJqzI=
Subject key identifier: 67:CA:52:D1:A8:79:42:B2:64:BF:FD:7F:8E:14:68:DC:05:9D:43:FD
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D341A29608989304362CC2CC7FDB53680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 1899
Signing time: Sat 28 Mar 2026 11:00:22 +0000
Manifest this update: Sat 28 Mar 2026 11:00:22 +0000
Manifest next update: Sun 29 Mar 2026 11:00:22 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: jn1yVvdJfS1q6qtsFt/zPZEfXgSovH3zdVG59j3XePA=)
2: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
3: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
4: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
5: qJJ0wcWXHtXGbw82Hr-JWQr4AsU.roa (hash: GTpJtd9njL4o/WVli2fbOv6n9dmdweWLp2jvbliePk8=)
6: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
7: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
8: yT13HA89M9lex7KTGn39CizxepM.roa (hash: cUKc2MzhQ8fQzkrbpUsocGqB25zuQeATEp9/WG+cVbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:29:60:89:89:30:43:62:cc:2c:c7:fd:b5:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Mar 28 11:00:22 2026 GMT
Not After : Mar 29 11:00:22 2026 GMT
Subject: CN=67ca52d1a87942b264bffd7f8e1468dc059d43fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:ed:c3:32:17:81:27:3c:62:c3:bf:9e:66:
fc:c8:13:a8:50:82:29:d8:8f:1f:8f:61:ae:e1:92:
09:4e:f5:e5:2c:a9:6e:91:b8:08:fe:e2:c5:90:43:
72:b8:4b:12:7b:f9:dd:1b:4a:24:60:e3:87:fa:af:
80:c0:15:40:df:3a:e3:93:02:00:14:43:03:85:00:
72:93:34:72:0c:68:86:4e:63:b7:bd:9c:bc:92:64:
c1:c9:94:35:1d:01:9f:43:ab:f4:45:e5:e3:ce:c8:
a6:bc:db:9a:69:91:20:ef:e7:8e:a8:8c:50:1f:39:
26:90:99:d5:02:ca:c3:4f:4d:e6:88:89:8a:5e:ed:
af:4b:ac:15:17:ad:31:02:cf:58:66:01:0e:8f:99:
09:e8:d9:34:b1:6b:c0:a6:60:cf:86:2b:c9:3b:ab:
dc:f6:65:46:6b:14:96:a9:57:31:e9:be:87:33:dc:
78:bc:cf:da:3c:84:81:38:0d:83:95:6b:7b:5d:7a:
78:fc:9d:a7:63:38:77:3a:fe:98:e6:13:7f:b4:98:
c4:b8:a0:ca:db:e5:05:5e:eb:06:68:8b:1f:6e:dc:
23:c0:28:b2:9b:ee:ce:33:82:e7:94:0b:02:69:56:
f8:9f:be:56:e8:77:79:f1:2a:a2:c8:6c:c9:a5:0d:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:52:D1:A8:79:42:B2:64:BF:FD:7F:8E:14:68:DC:05:9D:43:FD
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:e4:7a:e8:4a:a0:73:fd:06:bf:02:43:53:8a:2d:ee:31:
be:dd:67:04:56:6c:82:a1:8c:85:9f:ce:72:58:29:ab:c3:8e:
ed:e7:51:7f:16:5f:b5:ea:ba:ff:ac:ad:3e:ed:a5:38:b0:62:
33:ea:1b:71:b8:83:af:eb:8c:38:41:fa:cc:90:48:ac:29:85:
e2:6d:65:02:04:52:f4:19:71:6f:52:c3:ff:3f:08:27:7d:26:
62:92:ff:73:a5:5c:33:1d:d6:ef:08:b4:9a:3a:0d:f9:2b:ef:
db:c5:71:01:49:13:21:ec:00:f6:8b:4f:32:e3:75:9c:a4:f4:
95:c4:c2:9b:8c:63:ab:5a:ee:d9:00:67:b6:be:45:b8:1b:a8:
85:12:b2:d3:c5:bb:bf:6f:35:b1:f0:7c:42:27:fa:69:07:66:
8d:02:3d:e6:ae:34:11:38:da:2d:5d:26:90:c5:ea:66:4f:02:
a9:c4:27:d9:c2:25:bf:b5:d0:39:51:02:ed:ab:e5:24:83:31:
52:e9:34:ec:e4:51:bc:ab:5d:73:1a:e1:36:ca:d1:81:71:c4:
4b:1f:fb:63:51:05:49:69:00:a9:79:67:a9:c4:23:19:18:e5:
41:99:d9:8d:26:42:a4:f9:3b:00:cb:37:c9:4a:fd:06:7d:d1:
a6:86:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:09:35 2026 by rpki-client