Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: TykjOZlJLRhj5ayM6MDrNSvY4u/lzjYCEGXv2RqeaCk=
Subject key identifier: F1:EE:4D:C2:94:85:AF:BF:48:A5:C7:BA:6F:9A:4E:89:95:E5:8D:5E
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019D3AC2248DE6D6824C866443FDB05C62A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 18:01:34 +0000
Manifest this update: Sun 29 Mar 2026 18:01:34 +0000
Manifest next update: Mon 30 Mar 2026 18:01:34 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: a7CbcUgxkvWS6Y0dSSOK7s2RhR2LoeXw2G9BMJj8QlY=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:24:8d:e6:d6:82:4c:86:64:43:fd:b0:5c:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Mar 29 18:01:34 2026 GMT
Not After : Mar 30 18:01:34 2026 GMT
Subject: CN=f1ee4dc29485afbf48a5c7ba6f9a4e8995e58d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:0c:79:4c:cd:2d:db:04:4c:6f:1c:e5:67:
b5:c4:6f:87:2b:45:16:c6:13:bb:d1:c0:43:8e:b8:
51:cd:37:8a:34:b6:0f:1a:80:01:87:48:96:4c:45:
94:c8:3c:37:e6:29:82:f1:6b:f8:80:41:5b:ac:cd:
9c:9f:76:71:8d:c8:9f:01:5c:10:65:0a:ea:c7:14:
01:b2:1d:c0:43:5c:e1:5b:eb:45:b4:96:4a:06:74:
dd:25:5d:a5:1d:69:51:69:c9:ed:aa:89:a5:bf:53:
84:1d:25:40:ef:fd:55:09:e1:7c:c9:b4:7a:1c:68:
89:b5:28:1a:54:07:2e:4c:63:29:cb:b2:bf:ed:71:
d1:4d:93:fa:19:4e:64:f9:e9:52:9b:af:08:02:7f:
6f:7e:96:77:7b:d8:b0:69:7d:37:49:28:1b:7c:1a:
98:97:08:e8:c3:7a:2a:15:51:85:44:1d:27:46:59:
76:fb:04:bc:d9:a2:86:1d:e6:e9:d6:f8:67:7a:6c:
0e:1f:da:df:5d:94:ac:54:4f:b6:fc:d1:a8:59:44:
8d:a7:e8:b3:a3:b5:33:4c:bc:34:f1:98:a7:5e:8b:
98:d7:48:07:36:3a:38:d6:a8:07:0c:40:44:09:82:
41:67:aa:6a:8b:08:ca:58:b8:9a:23:98:23:50:7c:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:4D:C2:94:85:AF:BF:48:A5:C7:BA:6F:9A:4E:89:95:E5:8D:5E
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:14:72:07:d4:2b:e4:d7:7b:52:d4:bc:f3:35:54:5c:1f:ba:
36:96:e4:d1:01:b9:84:00:c3:6f:ec:8c:8a:de:9e:f5:e3:94:
b8:30:5d:f6:2d:65:1c:50:ac:94:fe:84:b8:05:1d:fe:39:44:
7f:e6:db:ab:20:8f:e0:53:38:a4:59:1a:01:97:d2:b8:6e:1b:
64:ef:21:3f:ab:f2:b9:8c:0c:eb:ab:14:ae:19:77:a2:b2:91:
d6:ae:33:80:a4:b5:b9:dc:44:34:d1:f7:fe:43:43:96:2e:8f:
48:4d:eb:bd:d6:c3:95:da:23:43:65:ea:8c:4a:21:a7:43:ec:
a8:76:3e:c0:44:4d:a2:46:af:98:4d:38:32:e4:95:9e:30:01:
aa:57:ce:0b:7c:55:e2:8f:c3:0e:28:4d:ca:c5:02:c3:6c:15:
9a:c8:44:32:69:0d:02:3e:ad:7d:7c:43:ce:82:c5:3a:81:c1:
44:0c:80:5f:b2:26:84:b6:5e:6e:74:a1:1e:90:ee:84:ec:c4:
e9:c6:dd:0f:d7:04:23:7b:c9:e6:9b:e8:fe:e5:0e:e8:06:f3:
df:be:62:45:57:3b:a4:35:57:f7:20:a2:b0:03:62:45:bb:42:
b5:86:07:8c:90:cc:a0:5b:ad:fe:6f:f7:6e:7f:1d:f2:d4:dd:
52:4b:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:47 2026 by rpki-client