Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: e20QxI1vZS3ponXDuPpVEZl33kPP8P+6XTz2AyXH+hk=
Subject key identifier: 46:DB:13:B0:36:7E:5F:97:55:F1:95:4B:9F:F0:58:59:3F:4E:F0:C7
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019D371B7C2A777512A180998AE5AC3E83AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 01:00:41 +0000
Manifest this update: Sun 29 Mar 2026 01:00:41 +0000
Manifest next update: Mon 30 Mar 2026 01:00:41 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: CgxfwQs0+x0zuJi5BMXB2ESeWLE4whFywJYjUVOv+vc=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: glnm8xkFmkyDnAUiwsatA2Kodgs.roa (hash: fWL/LJ3IYMAlKiuesh/wJUaIRPkKyGpbzqDlFGh6EOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:7c:2a:77:75:12:a1:80:99:8a:e5:ac:3e:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Mar 29 01:00:41 2026 GMT
Not After : Mar 30 01:00:41 2026 GMT
Subject: CN=46db13b0367e5f9755f1954b9ff058593f4ef0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:05:13:53:d2:07:5b:60:49:75:cb:df:3f:
c2:d6:6a:fc:4a:c6:d5:70:bf:6f:28:64:47:de:40:
c2:44:55:c4:4c:a2:77:59:5e:77:70:ee:38:36:47:
75:f4:a8:77:82:eb:01:18:14:85:74:cc:ee:80:df:
71:a9:eb:c1:26:6b:23:9f:a7:f4:5c:81:66:5a:c0:
d2:9e:ac:b1:4c:c1:80:13:c8:b6:3d:8a:19:a2:3d:
7c:7c:05:fe:58:2a:78:d5:6f:a6:a2:62:de:30:b9:
84:5d:63:7f:45:16:e0:47:18:68:8b:5c:7d:29:44:
1e:38:61:c8:a3:24:b8:d9:1f:06:7a:89:06:06:5d:
d9:9c:b6:e2:78:76:3b:30:d1:76:1b:ed:d8:c9:4e:
84:5b:a8:d5:49:44:67:b5:f2:d7:d8:f6:3f:92:95:
b0:14:7b:82:75:ac:80:41:e4:5a:d0:56:65:b9:17:
ca:99:aa:25:93:70:d6:73:e9:c1:76:34:ac:ec:dd:
e8:0c:c2:e7:a5:a7:0f:1d:8f:20:a2:99:19:d2:e6:
52:f3:26:52:fb:6d:90:6a:99:d5:58:98:3b:ea:00:
01:ef:72:30:d6:75:03:c3:6b:f9:74:e2:b3:a1:ab:
29:24:3c:33:8f:96:1e:b2:b4:96:09:17:c6:5f:8d:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:13:B0:36:7E:5F:97:55:F1:95:4B:9F:F0:58:59:3F:4E:F0:C7
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:50:ac:5e:4d:31:a0:71:46:cc:3b:11:72:53:b8:64:d9:
1f:23:56:d2:b1:5f:f9:64:68:a8:b1:7f:3f:f5:61:89:97:fe:
78:83:bb:3d:bf:b7:23:54:98:1f:42:02:e7:2e:17:ca:fd:ac:
44:5b:09:37:78:cb:c2:59:05:47:d7:75:6d:45:c9:5e:5e:4b:
3a:d6:96:1a:39:04:52:93:99:31:f7:8e:19:e7:2b:73:02:df:
b3:30:a5:b5:6e:fd:79:28:1d:0f:ac:df:bd:0c:0a:89:ea:ec:
15:a6:5c:21:cc:8f:82:95:7c:1d:4e:4e:d7:d2:23:8f:71:45:
d0:a0:e3:b6:42:57:d3:d5:1e:87:ab:5f:27:9c:e4:67:73:e8:
86:83:80:ab:2f:c8:f4:fa:99:d2:99:68:4c:a7:69:b0:b9:58:
b8:bc:f9:fd:ed:2c:6b:20:bb:05:8f:80:f3:ec:fc:0f:c8:c7:
34:b4:34:86:15:b0:ae:89:03:b9:09:26:b6:37:1a:bc:9a:b6:
90:ba:9c:cd:18:40:ca:8c:f3:b6:37:7d:9f:98:71:4c:94:85:
e8:ef:b0:6f:58:a3:25:5e:38:d2:6a:aa:24:c0:7c:1f:df:37:
b8:28:eb:55:d2:d5:19:14:f6:38:e0:03:9c:02:ec:e8:f6:b5:
4b:99:b9:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3wqd3USoYCZiuWsPoOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjYwMzI5MDEwMDQxWhcNMjYwMzMwMDEwMDQxWjAzMTEwLwYDVQQD
Eyg0NmRiMTNiMDM2N2U1Zjk3NTVmMTk1NGI5ZmYwNTg1OTNmNGVmMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBwFE1PSB1tgSXXL3z/C1mr8SsbV
cL9vKGRH3kDCRFXETKJ3WV53cO44Nkd19Kh3gusBGBSFdMzugN9xqevBJmsjn6f0
XIFmWsDSnqyxTMGAE8i2PYoZoj18fAX+WCp41W+momLeMLmEXWN/RRbgRxhoi1x9
KUQeOGHIoyS42R8GeokGBl3ZnLbieHY7MNF2G+3YyU6EW6jVSURntfLX2PY/kpWw
FHuCdayAQeRa0FZluRfKmaolk3DWc+nBdjSs7N3oDMLnpacPHY8gopkZ0uZS8yZS
+22QapnVWJg76gAB73Iw1nUDw2v5dOKzoaspJDwzj5YesrSWCRfGX41PbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbbE7A2fl+XVfGVS5/wWFk/TvDHMB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvVQrF5N
MaBxRsw7EXJTuGTZHyNW0rFf+WRoqLF/P/VhiZf+eIO7Pb+3I1SYH0IC5y4Xyv2s
RFsJN3jLwlkFR9d1bUXJXl5LOtaWGjkEUpOZMfeOGecrcwLfszCltW79eSgdD6zf
vQwKiersFaZcIcyPgpV8HU5O19Ijj3FF0KDjtkJX09Ueh6tfJ5zkZ3PohoOAqy/I
9PqZ0ploTKdpsLlYuLz5/e0sayC7BY+A8+z8D8jHNLQ0hhWwrokDuQkmtjcavJq2
kLqczRhAyozztjd9n5hxTJSF6O+wb1ijJV440mqqJMB8H983uCjrVdLVGRT2OOAD
nALs6Pa1S5m5+w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:55 2026 by rpki-client