Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: xar31uHAkFzcaDB4k0sFPTkbuF+KDEzCvzpp9dYeLlU=
Subject key identifier: E7:25:77:18:3D:6D:67:77:11:63:B5:9F:F5:62:9D:5E:D1:7D:63:46
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019D37890E6619C63ACF3CB37FE71C2E008B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: PKy5SH9GE97GbOdEMVIy+aawMJ5lCFr0rmmM7O8x5cU=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0e:66:19:c6:3a:cf:3c:b3:7f:e7:1c:2e:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=e72577183d6d67771163b59ff5629d5ed17d6346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:d9:27:da:1c:63:c1:37:d1:fe:6e:ed:af:
24:69:91:0a:b7:61:9f:76:ae:2d:ff:a4:25:c2:32:
0a:19:5a:29:64:3b:20:f1:75:33:f3:b6:b1:cc:51:
2d:72:be:ff:f0:da:d0:17:37:1b:00:4a:8d:c4:94:
9a:30:de:24:14:32:84:c4:f7:5e:c7:cb:48:8f:99:
ee:77:8b:fc:6e:b2:4f:96:24:2a:b6:ce:a8:11:82:
6e:1a:44:02:50:78:65:8f:f1:03:b7:df:af:b2:72:
47:df:b3:a9:8c:80:f8:a2:9a:e5:77:7c:9f:c3:34:
d9:60:4d:af:b8:c2:52:19:49:20:dc:75:29:dd:e6:
8f:6c:9d:40:68:d3:0f:c2:76:27:00:8d:e0:54:05:
de:bc:e3:a6:2a:df:1d:15:d4:fd:7e:1e:f8:80:a8:
27:2f:89:50:c4:d5:1f:da:52:9f:4a:4d:d8:90:7e:
be:20:15:95:d7:fd:4a:a4:50:dc:67:37:f8:3c:33:
4b:cb:54:0a:19:26:cc:f3:ef:dc:27:2f:b8:da:95:
26:db:44:af:1a:e0:78:18:96:84:cc:23:44:57:a5:
c8:97:c0:0e:7e:7d:cf:0a:7c:33:44:6a:07:5f:be:
25:ea:73:62:1a:0a:95:b3:77:a6:ee:28:e6:8a:16:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:77:18:3D:6D:67:77:11:63:B5:9F:F5:62:9D:5E:D1:7D:63:46
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:5d:58:ea:bb:9b:ba:a5:2a:b1:eb:8b:20:4f:94:53:be:
67:0b:56:f8:df:4b:e5:9c:fa:be:04:d7:4f:13:9c:5a:3b:e2:
3c:e9:c1:5e:65:e8:f8:cb:c3:13:98:d0:86:82:8c:26:e3:3e:
c8:4f:c1:a2:95:9b:3d:f1:e3:ff:ec:6b:6c:b6:6f:10:99:ae:
00:b5:f6:55:4d:b4:0f:df:8d:71:73:4d:57:09:41:72:45:9f:
f5:e9:e8:63:8e:7c:93:65:f2:ad:d0:d7:ba:6d:8f:40:ae:21:
06:04:bd:01:93:86:1a:a0:29:f4:60:8f:2c:bc:86:1a:cd:52:
be:e6:25:4f:6d:ad:8a:a3:39:5b:92:42:40:e8:ad:f9:45:17:
fb:b8:fc:2f:91:76:3b:13:85:58:48:6e:09:db:37:e3:5f:5c:
81:0a:5b:d7:20:8d:69:ea:f9:dd:c1:82:0d:b5:93:9b:01:32:
ab:5d:78:bc:17:df:da:c2:10:c7:77:f7:f1:b4:14:0b:33:eb:
65:dd:5b:f6:30:91:68:31:03:b0:a8:2a:1f:0e:75:1e:8d:87:
9b:24:5b:56:03:1f:67:33:c8:0e:cf:ad:73:29:75:c9:3c:b4:
f7:52:e5:e1:cb:42:95:90:af:37:50:0b:08:d9:41:3e:5b:94:
b1:6e:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client