Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: An/MQTDer1+pT+eExhS8JycEhZ7mP8hiMRY3PrIHFPE=
Subject key identifier: F3:30:19:53:5C:82:7F:7A:C5:2C:48:31:93:1C:07:D2:1B:3F:14:BE
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019D3909AAA54C0EDE57EA9B6B5DF5F0FE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: bX9eBasQMPj3w353TGLtCroec592IdQvWkCKSYjQ3sI=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:aa:a5:4c:0e:de:57:ea:9b:6b:5d:f5:f0:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=f33019535c827f7ac52c4831931c07d21b3f14be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:2d:e0:6f:e4:24:88:a3:68:d6:ec:52:ed:
b4:43:e2:c7:2c:8d:b3:79:a5:01:51:80:3b:fe:96:
4b:d1:37:c4:3a:a1:ac:64:c6:cf:72:74:f1:a5:9e:
49:85:1f:e2:3b:a8:a6:02:70:27:dd:fc:c8:9f:bd:
67:2d:94:4f:6d:23:49:f3:02:3a:e1:4b:7e:de:d1:
46:1b:d5:ca:2d:43:50:ef:85:47:cb:ad:82:11:4f:
87:07:89:5d:89:51:c6:aa:5a:db:da:a3:db:4e:c0:
77:f9:15:17:52:7b:fc:f9:06:1e:d5:71:d6:e5:61:
0c:8b:3a:e3:8b:fa:01:a2:7f:36:9f:ae:b3:76:32:
9c:fa:c4:aa:45:b5:6f:6e:8a:8b:bc:4d:3e:7c:9b:
69:76:1b:22:b5:93:59:f5:d5:00:e8:4a:a5:28:7e:
18:82:c9:12:ab:2d:da:77:64:48:9d:02:8b:f6:c8:
a2:32:02:36:c7:1f:b2:b9:76:15:6a:44:94:6e:2b:
b5:75:60:68:f1:7e:79:f0:49:aa:3d:b3:c0:97:28:
15:e0:ee:7a:cb:90:bb:02:27:1e:5d:30:a6:a5:57:
16:06:89:0b:98:7c:09:46:1f:54:fb:26:bd:f3:d6:
6b:55:b6:be:02:a6:0b:a6:61:36:0d:2a:01:da:eb:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:19:53:5C:82:7F:7A:C5:2C:48:31:93:1C:07:D2:1B:3F:14:BE
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:db:99:34:03:6f:a1:cc:28:d9:d5:82:81:4f:9f:5d:c0:0f:
6e:a2:5a:46:1b:ed:c4:d0:95:7e:f7:47:72:21:31:54:76:a6:
ce:70:2f:e5:34:56:5d:d8:8e:55:83:76:63:4d:ac:b4:d7:aa:
21:08:03:63:6c:8c:7b:b1:63:36:9a:e8:32:f7:2c:c6:43:08:
3e:c5:7b:29:22:03:9e:17:2f:50:ee:de:26:7a:8b:74:3b:86:
2e:97:d7:24:81:01:40:4c:e0:20:c1:b8:4d:55:b4:fd:1a:57:
38:0d:dd:48:d1:91:54:96:65:08:03:bf:28:e4:62:5d:f4:1d:
de:98:34:0b:90:4d:e2:f0:3d:bc:a5:99:aa:ba:59:e2:ba:c0:
3f:1f:f5:ab:6f:d6:22:76:00:5c:7d:42:e6:5d:5a:44:c7:30:
10:5a:15:db:68:93:3c:1e:00:a6:c0:ca:6d:e5:59:c9:bf:8c:
fa:85:c1:7b:a9:93:55:74:7c:c8:b0:c3:ba:c9:f5:37:a0:83:
c7:45:68:e9:a3:5e:52:df:9a:aa:c8:e3:bb:5b:19:35:84:71:
ca:4c:d5:02:e7:24:cc:27:0e:97:70:3c:ab:89:c7:b6:f1:86:
ae:e0:6a:ea:7e:3d:d5:05:ec:e1:b5:a6:aa:ab:e5:ee:4b:c1:
96:13:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:22 2026 by rpki-client