Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: 5gioriSBfWaKpQ0glZKpTAt5u2uL5DlvOHNMgnWmrWk=
Subject key identifier: 78:53:64:97:16:6C:DD:BD:17:D1:07:2A:15:8D:68:E7:E0:BF:8B:96
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019CC907B53BECE90C762A48193DE2B83F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1856
Signing time: Sat 07 Mar 2026 16:00:51 +0000
Manifest this update: Sat 07 Mar 2026 16:00:51 +0000
Manifest next update: Sun 08 Mar 2026 16:00:51 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: tvYim0GjZ8Bdb2dumnc2sHt+m8GfDf7An4r6IF4IOcQ=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:07:b5:3b:ec:e9:0c:76:2a:48:19:3d:e2:b8:3f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Mar 7 16:00:51 2026 GMT
Not After : Mar 8 16:00:51 2026 GMT
Subject: CN=78536497166cddbd17d1072a158d68e7e0bf8b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:3b:82:9e:52:06:ae:6f:1e:48:de:fd:8c:
d2:eb:5a:e1:88:24:59:4c:12:3f:19:de:cf:9e:69:
6c:3f:59:24:90:e1:25:eb:f6:86:ca:7b:2d:ed:16:
8f:38:85:43:4c:4f:a9:1c:96:a8:d2:fc:11:a1:94:
ed:38:41:29:fc:4c:d3:cb:08:e3:63:84:b8:b9:cb:
02:5c:92:01:11:d5:7f:e1:4b:c8:d0:cf:d5:87:46:
71:63:77:d5:5c:d1:92:92:9d:ff:48:97:2c:14:1f:
5d:03:cd:a4:76:b5:b4:c8:d7:0f:86:9c:b8:4b:aa:
20:a1:88:60:f8:50:39:41:c2:8e:a0:98:a9:4e:67:
55:c5:31:e5:24:98:3e:93:02:c5:6e:2d:b8:6e:ba:
7d:1f:b7:cb:e7:4a:ba:4e:f9:47:3c:90:7f:b0:2d:
c3:a6:dc:f4:17:65:fe:5e:62:6b:17:77:3f:ec:36:
95:2a:89:de:31:2e:a4:58:52:e2:d6:4e:72:0a:f3:
97:39:fa:08:01:d8:36:68:d5:d3:b7:fc:a6:a9:78:
ff:e4:57:aa:4d:46:16:61:06:16:fa:b9:bd:fd:d6:
c2:8c:c3:6f:02:6b:73:22:7e:07:0d:37:bd:4f:32:
2e:3c:38:12:dc:8e:97:b2:e2:49:50:11:94:79:25:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:64:97:16:6C:DD:BD:17:D1:07:2A:15:8D:68:E7:E0:BF:8B:96
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:ba:98:24:0c:4e:26:d6:84:a7:77:7b:bf:04:eb:18:5a:
d6:c2:ba:b3:db:10:31:a9:39:28:c4:19:ca:0f:fb:53:f4:30:
06:7e:6d:fe:65:f8:9d:5d:00:ef:f2:9e:bc:7a:0f:58:0c:99:
97:d5:5b:1f:b1:ed:d1:81:cd:b0:fb:c5:b4:2c:ab:21:92:c7:
df:85:b5:0a:b6:98:41:72:77:53:b7:d8:93:28:0a:55:5d:78:
0f:8e:56:09:eb:f2:82:0d:25:0c:29:f8:a7:81:01:4e:cc:38:
38:ba:d5:f2:37:2e:de:ae:44:bb:81:6d:cf:47:49:26:3c:28:
7c:43:ba:3f:1f:ea:23:1d:e3:87:d6:92:17:18:4a:01:75:73:
5e:d9:8b:18:fe:61:c4:24:99:ae:4d:08:8d:3e:32:4b:6a:47:
1b:30:a5:09:24:32:ab:a6:5d:08:3b:11:dc:e2:af:8e:63:62:
1e:dc:2e:55:1a:55:3a:ab:2d:a8:07:95:05:1c:37:d4:04:22:
76:b3:c8:8a:f4:08:35:0f:db:c0:e2:01:94:ef:10:cf:86:ae:
27:d4:05:ab:ed:8c:a8:f4:e9:d3:ca:dd:ad:f4:76:2a:90:49:
32:c4:7c:93:ec:59:c2:69:f9:9e:0b:f0:9e:66:3c:75:14:a0:
44:a4:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:07:16 2026 by rpki-client