
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: ivMJTqtmxEYA8Fje7NT+mk2Ga97obdGOoVjpi3LeiQA=
Subject key identifier: 7E:94:60:B2:AA:F1:1B:6D:33:EC:93:2A:94:46:26:B8:5F:30:D7:AC
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019CC6E2AC780F0B9D522E8D378535481B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1861
Signing time: Sat 07 Mar 2026 06:01:09 +0000
Manifest this update: Sat 07 Mar 2026 06:01:09 +0000
Manifest next update: Sun 08 Mar 2026 06:01:09 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: 1tmcrNcGGziYD8WpaSZEyedreetLdj4orzb6GJrhC9s=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: AFp3F2X8yQTaBQfkM_zsF9UYmww.roa (hash: 7p1zPt6PNmGU8W+3TijuQxRqjYyJqKF96JpQUyZBeZY=)
5: EHQpUpEMo4S4SvN6ygFHQVkQJ6A.roa (hash: aL98OrOlu07CFPxf6rwXnJMO4vbO/beSHKJmE+F/5nQ=)
6: l6dcV9zJ9n_Ctd5EzzonA7X-jFo.roa (hash: mwxDuvlYfTCoynYTFAQOpS/BivdbtxW1voj1voq8fsg=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:e2:ac:78:0f:0b:9d:52:2e:8d:37:85:35:48:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Mar 7 06:01:09 2026 GMT
Not After : Mar 8 06:01:09 2026 GMT
Subject: CN=7e9460b2aaf11b6d33ec932a944626b85f30d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:f1:d6:cf:a7:71:2d:5f:2e:6d:be:91:09:
ac:31:56:b1:da:83:17:03:73:2e:3e:87:b7:64:c5:
45:c2:49:f4:1e:e7:a3:92:29:24:8d:37:da:94:59:
34:f8:d3:5a:ee:93:07:0f:90:a9:cd:27:b2:f3:9e:
57:05:14:d0:2a:81:b7:7a:f1:7e:65:19:95:52:ed:
1d:0e:7e:c1:7e:47:e3:fa:41:2a:b6:cb:4a:ed:b9:
6c:10:23:f7:2f:c9:7d:5a:cd:43:cc:7c:8a:56:26:
a4:f4:d4:3c:89:d8:38:65:b5:4b:7e:74:4f:bc:6e:
97:f8:c9:2a:9f:37:86:88:ad:d6:cb:b6:d7:b0:e3:
30:f2:9d:c6:f1:f0:e4:17:43:3f:34:b8:32:1d:2a:
f2:5d:0c:02:53:c7:39:4a:34:f6:ec:e3:bb:92:d8:
0e:e0:4b:57:a9:19:a2:c6:42:ca:27:e3:31:7b:c9:
27:78:16:2d:9d:d0:98:97:c4:77:a2:05:de:5b:73:
3a:c1:fd:db:05:2c:8c:75:39:39:44:ba:39:a2:f8:
df:40:1d:6c:b3:f3:01:13:74:e1:2d:00:3d:9c:99:
12:f6:01:89:6a:7d:75:27:5f:8c:17:aa:f4:38:f1:
f8:04:d1:96:a8:4f:9a:c2:9a:f1:07:a2:c1:17:af:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:60:B2:AA:F1:1B:6D:33:EC:93:2A:94:46:26:B8:5F:30:D7:AC
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:66:d1:a0:f4:ec:5f:a0:e5:89:bf:77:28:34:b2:a4:f7:
aa:aa:88:24:7e:0b:8e:ed:e1:52:5c:09:14:71:dc:58:bc:c2:
4a:82:35:fa:a4:ff:06:26:23:6b:89:b5:ac:a8:8c:7a:ac:87:
e2:19:b6:7c:18:7a:06:92:61:23:18:d1:ea:04:e4:82:8f:c0:
66:a9:0d:da:91:11:1b:e7:b3:b1:5a:5a:75:a3:fe:f6:1f:0a:
c4:14:f7:3f:db:91:31:b1:c2:00:4a:e7:25:30:3e:60:d4:66:
97:c1:eb:2e:6e:aa:b9:ae:fe:15:91:dd:6f:e7:27:b1:b5:84:
3c:cd:fd:53:54:52:bb:43:ff:6a:e1:7d:ae:b3:ba:59:fb:d8:
6f:0b:a4:17:99:4d:bc:73:ba:53:38:18:6c:0a:f7:e1:07:3b:
25:8c:6f:fc:66:de:3b:ce:5c:89:4b:c1:fb:45:5d:7b:cf:fb:
99:c8:14:a9:4e:5d:cd:77:1a:cd:fa:88:05:f0:f8:2e:df:f0:
d5:40:b5:e7:8d:e9:8d:26:74:03:f0:43:48:49:2f:60:a2:3f:
8e:f1:b0:f6:c3:d7:7f:cd:60:75:42:45:64:72:a9:ae:4f:10:
8a:51:50:49:e1:30:a3:0c:41:e5:a0:70:1f:f6:22:aa:28:70:
3e:8e:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:14:52 2026 by rpki-client