Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: yDdq+rWfwlq0mhXenfvrVrfuLiMyYkuWb178uVRCQsY=
Subject key identifier: 95:D1:3E:1F:5D:06:33:79:8C:D1:70:DC:51:B4:73:B7:25:05:85:3A
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019D39418E4887D916365555F858DB4AC7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: VrDfUC88w+c+sTR1u6PkIjCNDQ/VzQLwzMSYeguEEEI=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8e:48:87:d9:16:36:55:55:f8:58:db:4a:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=95d13e1f5d0633798cd170dc51b473b72505853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:c4:87:1f:2e:46:99:b0:d1:bb:31:06:97:
aa:e2:80:fa:4d:5e:93:48:9a:20:03:f7:b1:0b:fe:
3c:b3:75:03:73:b7:33:c6:13:5a:d4:03:ad:49:48:
fb:b7:3d:13:1b:52:fc:fe:2e:d5:7f:5a:5f:33:0b:
15:c2:6b:1e:9a:1a:94:e8:f9:70:2f:bc:bb:c6:2d:
5e:95:b8:f6:75:da:37:ff:d0:18:62:b0:fd:4f:7c:
d3:7e:fe:28:14:bc:0d:7f:e4:6a:94:ea:78:6a:9f:
96:f3:c2:d4:63:7d:1a:96:92:ca:4e:13:51:62:15:
46:41:0e:cd:e9:ea:bf:46:29:b7:a4:22:3b:c6:0a:
5e:df:46:c4:31:4a:d9:6a:16:b0:d0:08:02:7c:08:
12:65:9b:78:5f:90:d0:c3:5a:ea:24:f6:98:0c:ca:
59:5e:f3:96:a8:be:7c:12:c5:58:a1:c8:60:72:ed:
bc:d3:d2:1e:af:9f:89:9c:8c:fb:83:ae:cb:8c:a0:
ed:f0:25:1b:0f:cb:7d:a4:2f:ee:c2:fc:19:87:54:
a4:c6:c4:14:bb:ae:18:1d:ea:1d:b5:45:c7:e9:fe:
31:74:37:4a:e4:5a:b4:dc:4b:8f:fc:ce:bc:36:99:
ab:63:a2:e3:14:6e:e0:8e:50:d6:5e:df:f6:ab:fd:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:3E:1F:5D:06:33:79:8C:D1:70:DC:51:B4:73:B7:25:05:85:3A
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:b0:53:fd:ab:ed:3d:11:0c:db:a0:42:5a:6f:1f:f3:35:
84:9d:be:ee:1d:2c:78:28:09:bf:46:6d:d7:41:0b:36:9d:2d:
a6:e0:3d:c0:5a:66:65:3f:77:00:06:fb:8e:06:88:96:06:67:
39:4d:03:8b:94:6c:6c:83:10:f5:51:7f:50:b2:ea:ce:22:6a:
0f:66:a8:9b:4a:79:53:a2:be:46:28:54:6a:f4:7b:ca:f4:82:
a2:d9:b0:10:48:80:fc:a9:e0:23:e7:e0:44:10:03:54:d5:e4:
a7:c0:04:e0:98:91:01:c6:d7:c6:81:55:38:29:91:e3:cc:ff:
ed:35:9b:c7:c1:16:ac:c5:a3:1f:66:23:d1:63:2a:73:ab:6e:
f4:ba:fb:c5:8c:17:f9:2f:f0:cc:06:35:de:82:45:9c:15:e1:
2d:ed:04:47:cd:56:c5:31:93:c9:7c:80:0c:a9:64:29:55:b3:
f2:e3:6b:45:ec:00:6c:c1:15:1e:de:11:bb:ba:60:ee:e2:35:
75:db:48:01:56:37:f5:a1:89:05:8d:43:d8:6e:0a:8b:33:90:
18:24:c7:2d:5b:47:24:e9:90:80:d9:77:75:62:71:e0:a4:e6:
f2:50:ea:2c:90:17:11:bc:b2:e4:87:e7:c4:93:37:68:2b:69:
0d:e1:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:30 2026 by rpki-client