Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: XappNicPS6lcl3eUB3S4laY1E6GC+KUCXTfuah0Fzsg=
Subject key identifier: 14:21:F0:67:BC:03:78:08:60:1E:A5:86:5D:01:C5:60:1A:C5:AE:E9
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019D0DB225AD535552460005DEFE5DACA527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1884
Signing time: Sat 21 Mar 2026 00:01:11 +0000
Manifest this update: Sat 21 Mar 2026 00:01:11 +0000
Manifest next update: Sun 22 Mar 2026 00:01:11 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: 7UzBRit4N3fKxIwTf4q7d+sHTQHKl2yruAyiFXLsiVY=)
2: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (hash: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM=)
3: FHmWYGqSdJ5-CsqGnoJKGcWPx4o.roa (hash: S6HSVK6CcsFHebtvgQR42wkTCiX4LDp+Y8NKZpU+vms=)
4: XKNodyTpVE_edu5x6d6F6Y2O2tk.roa (hash: bwj5H0svZvvLnoA8x9sKQziSKp08OjMhTh7PRO1SLcQ=)
5: ZDpRY_KWNL6AZ9OnIDN7BtGPipc.roa (hash: 1DrZ+2ptHaqoBHGtimSHqvMKa2JLNNgAJEEeUlCf64I=)
6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
7: xTqndtOYNNxGOKliN2NcyMFkix8.roa (hash: 7wOPiKD57FwmTf2UKEcrkMSUmvstWjxFYMSq5+S7Psw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:b2:25:ad:53:55:52:46:00:05:de:fe:5d:ac:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Mar 21 00:01:11 2026 GMT
Not After : Mar 22 00:01:11 2026 GMT
Subject: CN=1421f067bc037808601ea5865d01c5601ac5aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:bd:06:d2:d2:3a:dd:fa:c4:af:41:ff:ed:
45:d1:0a:46:56:58:20:34:1c:d7:de:5b:0b:c2:1d:
45:c2:e8:a3:1c:61:3b:07:45:63:40:3f:90:bd:42:
a1:63:24:00:e0:83:20:d4:a1:b8:d6:0c:47:a0:5c:
f6:1b:03:69:87:b7:50:20:fc:6e:e2:9f:c8:44:a2:
7e:17:42:0d:cc:ab:27:00:cd:ab:32:bc:14:69:98:
25:ca:3a:26:f7:f0:e2:8e:ff:28:50:95:34:a7:08:
8e:09:7c:bf:75:50:65:90:2e:ce:ed:01:0f:f8:2a:
b1:81:75:91:8f:72:cb:a7:cc:45:2f:85:f7:f9:9c:
57:e2:6c:0e:dc:fc:3c:54:31:7f:49:09:7c:6c:94:
4e:bb:d0:40:63:69:ee:26:cc:48:e6:39:35:f8:c0:
a3:81:bb:4c:1a:b6:85:04:a8:69:fb:7a:26:f2:b6:
9f:cb:ad:4e:5b:fc:50:b6:57:c9:f4:ab:e9:d5:e7:
15:a4:f4:15:78:46:b3:6b:a8:ec:28:17:25:da:f8:
d0:46:a7:a0:d4:ac:71:d2:a1:91:a4:e4:6e:bc:7a:
09:ce:1e:95:19:99:89:f8:93:da:c5:64:23:a2:8a:
1a:67:ff:46:76:a6:3b:33:0c:47:c2:3d:a7:84:32:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:F0:67:BC:03:78:08:60:1E:A5:86:5D:01:C5:60:1A:C5:AE:E9
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0d:f1:59:c8:54:15:39:8c:da:c6:90:c9:14:4e:e5:d8:d9:
cd:b3:af:4d:f6:76:b9:a0:28:2b:89:ec:72:44:65:25:fc:8d:
02:bf:10:b5:63:7a:c2:eb:72:54:90:40:9a:8b:2d:ac:08:87:
f1:3c:52:82:df:bb:a1:9f:16:8d:aa:fd:47:fa:31:bb:ed:72:
3a:d4:f9:79:a3:a2:19:31:20:3a:75:d8:96:66:82:8a:ac:41:
a4:13:2f:60:fa:31:92:7d:67:e8:9d:13:60:e5:a1:28:07:86:
78:6c:62:34:7a:5b:06:ca:c6:a0:52:a5:f2:3e:60:86:6b:66:
bc:c0:c5:88:52:cd:60:16:7c:4d:a2:ab:9e:0e:af:bd:77:91:
9f:e1:91:24:00:4a:21:64:7a:88:db:1b:b8:1c:8a:d3:2c:d9:
85:30:5f:02:8c:a8:b4:e4:b4:64:e6:5a:12:bd:e6:ba:82:12:
e0:0b:4d:f1:7e:96:bd:4a:23:1e:c7:b5:86:e9:4c:54:36:8b:
9a:ae:67:c5:37:d7:ad:04:75:b4:e0:2c:c3:c6:73:5c:a5:0f:
eb:05:3b:ea:a4:d9:0f:49:83:41:e8:f4:1d:08:b5:10:d6:59:
8f:82:59:db:18:0b:ce:47:29:58:90:ee:51:8e:04:ad:6c:b3:
51:16:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:04:47 2026 by rpki-client