Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: LvffpToJj5zfXIX9mGBX0RkbINo1vbMFHXGTbcNu6hI=
Subject key identifier: ED:CB:D1:6C:1E:19:1B:1F:2D:60:58:08:33:FD:14:D2:13:99:77:9B
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019D382DD1DE6A1807D92540DF8D6634545C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: uy3Mg+8CgN4BDO6Ji1DEUxz8wnwxXytH0GKHnbI1mvA=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d1:de:6a:18:07:d9:25:40:df:8d:66:34:54:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=edcbd16c1e191b1f2d60580833fd14d21399779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:22:d7:17:05:fb:75:dc:ab:d1:3d:03:e7:
69:ce:d7:b4:5a:1d:27:60:88:d9:05:78:e8:a1:51:
f7:cd:1d:44:5b:4b:96:40:44:5f:34:79:95:f1:80:
f8:a8:f8:69:6f:a9:23:6c:cf:1c:e4:25:99:58:d3:
46:21:d4:1d:4b:96:da:33:47:2b:08:a7:76:23:f3:
65:f8:cd:3c:bb:7b:ed:da:c1:02:1b:40:7b:81:a2:
e9:32:6d:42:e9:41:11:14:0e:e3:7b:42:11:97:48:
8b:fb:19:fa:f0:88:c1:34:fa:5f:b5:3d:8f:f2:56:
fe:85:94:0e:aa:d8:57:03:5f:16:e9:d6:ff:29:cb:
95:be:07:96:79:32:8b:a2:9c:37:0a:ce:2f:a1:c2:
2d:5a:04:fa:6a:86:92:85:9c:b8:a0:fa:19:48:b5:
7a:40:03:52:29:fd:34:13:c9:65:d9:69:79:cf:d5:
58:e9:a4:1a:a4:ce:3f:1d:75:a7:52:32:bf:d0:89:
27:a0:6d:1c:cf:40:fe:2a:8f:10:fc:f3:e0:1b:be:
f7:65:a4:2b:c9:ef:d9:b6:72:27:55:07:76:6a:68:
23:ba:1c:df:45:b9:4e:a2:fa:ca:a4:18:68:bd:ca:
65:d6:ce:a2:23:62:0a:25:f2:83:80:92:9c:e7:d7:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:D1:6C:1E:19:1B:1F:2D:60:58:08:33:FD:14:D2:13:99:77:9B
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4f:8d:92:ce:6a:fb:bc:ee:f1:6d:3c:5d:4b:ec:f7:3c:c7:
41:db:cb:89:c1:8a:33:59:65:e7:19:a2:9d:01:5c:24:b5:03:
ef:a3:17:d4:a8:02:4d:30:03:81:bb:8b:fc:03:ec:c3:cc:3a:
7f:e9:9b:4a:fc:5a:42:c4:59:03:43:f4:72:f2:2a:ce:68:c5:
1a:e8:7e:c9:b1:c1:ee:6d:c1:ff:21:d0:a3:48:5e:3e:f7:00:
ae:8f:39:45:76:33:9c:e6:e4:21:f9:98:ff:ab:89:e0:dc:67:
bf:ee:87:57:5b:c7:f8:6a:e5:11:19:52:af:88:ed:8e:ec:83:
ea:25:11:5a:71:d7:50:40:81:7e:de:b1:49:77:aa:5d:8a:63:
e7:26:24:4b:35:25:8b:1f:1d:2a:08:92:2e:65:fb:4a:ee:ee:
9b:a8:49:e2:e4:82:ff:00:8e:35:75:cc:95:4d:27:b7:fa:e2:
42:f9:b5:05:80:39:4a:2b:65:7e:c5:04:f0:0b:b0:7c:d8:db:
5f:54:c5:b7:db:ed:f6:26:bb:40:35:9b:0b:3c:8f:5a:d1:5b:
f0:78:c0:4d:50:f3:b9:05:68:64:d7:62:bc:bc:fa:c4:f4:21:
cf:38:c0:ef:da:0a:d5:28:58:28:a0:96:66:b7:5c:33:13:01:
6e:df:6a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LdHeahgH2SVA341mNFRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl
ZjE2OTIwHhcNMjYwMzI5MDYwMDIwWhcNMjYwMzMwMDYwMDIwWjAzMTEwLwYDVQQD
EyhlZGNiZDE2YzFlMTkxYjFmMmQ2MDU4MDgzM2ZkMTRkMjEzOTk3NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox4i1xcF+3Xcq9E9A+dpzte0Wh0n
YIjZBXjooVH3zR1EW0uWQERfNHmV8YD4qPhpb6kjbM8c5CWZWNNGIdQdS5baM0cr
CKd2I/Nl+M08u3vt2sECG0B7gaLpMm1C6UERFA7je0IRl0iL+xn68IjBNPpftT2P
8lb+hZQOqthXA18W6db/KcuVvgeWeTKLopw3Cs4vocItWgT6aoaShZy4oPoZSLV6
QANSKf00E8ll2Wl5z9VY6aQapM4/HXWnUjK/0IknoG0cz0D+Ko8Q/PPgG773ZaQr
ye/ZtnInVQd2amgjuhzfRblOovrKpBhovcpl1s6iI2IKJfKDgJKc59eMKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3L0WweGRsfLWBYCDP9FNITmXebMB8GA1UdIwQY
MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt
NTI1MjMwZTIwNjgxLzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx
LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAok+Nks5q
+7zu8W08XUvs9zzHQdvLicGKM1ll5xminQFcJLUD76MX1KgCTTADgbuL/APsw8w6
f+mbSvxaQsRZA0P0cvIqzmjFGuh+ybHB7m3B/yHQo0hePvcAro85RXYznObkIfmY
/6uJ4Nxnv+6HV1vH+GrlERlSr4jtjuyD6iURWnHXUECBft6xSXeqXYpj5yYkSzUl
ix8dKgiSLmX7Su7um6hJ4uSC/wCONXXMlU0nt/riQvm1BYA5SitlfsUE8AuwfNjb
X1TFt9vt9ia7QDWbCzyPWtFb8HjATVDzuQVoZNdivLz6xPQhzzjA79oK1ShYKKCW
ZrdcMxMBbt9qsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:10 2026 by rpki-client