Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: jI7+gzl6b2gEiNNjRfMgaFHKyx11Y0CIs1BoFxxVv0g=
Subject key identifier: C2:A3:F7:9A:47:0A:75:94:22:8F:B4:78:11:37:4F:FC:EA:F3:4E:5A
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019D38667462AD7A0C0BC9EB04875C1A2647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: l0ZbiDWj0+dFGVen+/DXCPH7ycTzkRTNiI7ObamPi4I=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:74:62:ad:7a:0c:0b:c9:eb:04:87:5c:1a:26:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=c2a3f79a470a7594228fb47811374ffceaf34e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:81:69:15:4c:37:e5:12:73:ba:78:fa:a4:
7e:b0:c4:99:46:ff:2e:7f:86:34:e5:5e:72:95:38:
60:8a:21:64:26:c0:92:f9:06:ad:cb:ab:5c:28:ef:
28:09:06:fd:5a:c1:ab:d8:8c:9c:9d:af:93:fb:d8:
e9:75:6c:a3:72:14:8a:68:91:97:f7:c9:90:d5:8d:
b6:1c:d2:44:75:08:0a:e8:a4:f2:e2:3d:5c:5e:d0:
01:b2:66:47:0d:d2:20:ba:86:87:76:cb:77:dd:cb:
ef:86:3e:03:6d:af:d4:72:42:6f:ae:01:04:3c:12:
be:16:d9:05:b7:d9:81:12:88:da:57:ed:69:ab:07:
a2:20:75:06:2f:53:5b:23:6e:d1:3b:3e:51:a9:78:
35:8c:ce:59:e2:e6:a3:18:60:31:61:18:ff:e5:49:
d7:5a:2e:f0:ad:98:c9:92:6c:85:67:aa:fb:19:45:
8f:10:84:80:b3:0c:7e:73:69:8d:c7:e7:de:8f:ad:
f0:eb:8b:0b:74:91:de:ee:48:0e:16:a8:e2:45:3f:
c7:b7:71:e7:8b:04:bc:b6:d2:f2:6a:b3:1b:41:b1:
48:71:29:70:b3:5b:1b:b2:43:0a:34:87:be:bd:e9:
19:87:79:f6:8f:f2:39:04:fe:3d:ec:27:5a:c2:66:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:F7:9A:47:0A:75:94:22:8F:B4:78:11:37:4F:FC:EA:F3:4E:5A
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:4e:96:80:63:e5:41:9b:d1:15:a6:72:fd:0b:94:1b:2e:
7b:44:8d:c6:fe:32:8f:8e:92:5d:f4:e3:f1:ad:c5:63:d0:95:
a1:48:2c:c2:5d:25:80:cc:c9:eb:3c:7a:2d:0e:8f:85:c4:40:
cf:01:b4:e4:c5:7f:a4:e4:41:7c:dd:c6:47:f0:7f:f8:22:c8:
c1:a4:0b:03:7c:72:6b:ec:a4:b6:9b:e1:39:8c:78:86:da:aa:
b6:a4:0d:9e:ca:62:2c:52:ba:07:6c:ec:f8:be:4d:98:fc:b4:
30:64:ce:ba:f1:d6:65:b5:4a:24:64:d1:1c:ec:de:ea:2c:c6:
18:ef:5c:35:b4:ec:d1:d6:d8:c7:23:50:3e:96:4d:63:91:5a:
ed:be:06:71:b4:c9:2c:26:ab:c5:f8:31:f8:95:77:9c:72:3f:
61:bc:53:40:91:96:d6:57:89:f9:b2:0b:48:9d:95:b3:31:16:
99:0b:16:70:f2:31:86:c8:0c:5c:ef:8f:fc:1a:43:7f:99:0b:
47:ba:c1:0b:6d:59:3c:7c:47:00:ac:c4:56:36:a7:35:9e:7f:
ec:16:37:e5:b3:16:3a:36:e8:20:7b:7b:9b:ab:0b:98:89:cd:
bc:9c:1c:f6:cf:1c:fd:49:d7:25:9c:e4:78:50:03:42:e4:c2:
a0:74:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:27 2026 by rpki-client