Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: ZXI2ESqatTjKoZd/j9LZIH+QczjmUxSwG5unZ4yPGxs=
Subject key identifier: 13:B7:BF:AE:E3:F1:38:0A:06:1B:A3:8C:60:12:98:0B:1F:87:21:71
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019D389BBCF039A8FD690A70D116F9BF0880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: ovC8LWSNA022/ijtluhaoEfLuGdTOH1K3qavx+NiR3E=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bc:f0:39:a8:fd:69:0a:70:d1:16:f9:bf:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=13b7bfaee3f1380a061ba38c6012980b1f872171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:c1:93:46:d5:27:58:c8:7e:38:81:52:8e:
7c:56:09:3c:ad:02:ec:4d:69:cd:0c:ff:a3:0f:a1:
6c:d1:27:6b:87:c1:1f:aa:2c:f6:62:89:b2:95:22:
12:6b:27:b0:02:bb:bc:e4:dd:2c:dd:09:1c:de:68:
f2:f2:21:a5:20:36:b1:c2:a3:30:68:a9:28:01:02:
69:45:b3:87:75:d3:90:e0:28:3c:13:9d:a1:b7:7a:
e3:9f:dc:ba:f7:57:74:f8:24:40:4d:e6:67:54:26:
00:5b:4d:88:f5:15:2d:07:fb:9a:d7:ee:2d:af:06:
fb:08:91:58:7b:94:a4:ae:9c:ab:f0:03:b7:92:b2:
a9:94:c1:83:08:59:d3:e9:ed:da:44:f3:f5:57:16:
a7:2f:04:a7:a0:f2:7a:2e:93:db:e6:19:2e:ee:86:
a9:d7:6b:2b:a4:5a:11:14:6e:75:b4:af:41:d9:0f:
78:b0:39:12:88:46:24:75:4a:94:c2:05:11:e8:02:
5b:49:be:50:0a:6f:da:07:ea:2c:45:34:82:2a:7f:
c6:0c:e4:52:a9:6f:43:d8:8c:2f:ca:48:ba:a1:16:
37:8c:c4:fd:d5:ff:76:52:8e:e8:29:f4:5e:30:33:
9f:fe:7a:f4:9b:44:28:30:9f:fa:19:fd:8a:c7:31:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:BF:AE:E3:F1:38:0A:06:1B:A3:8C:60:12:98:0B:1F:87:21:71
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:b7:dd:d5:1c:d9:43:f9:b4:0f:c1:b6:9b:28:41:24:6f:
55:f4:6a:cd:9f:a9:11:4a:0c:0d:92:94:46:41:9d:9e:f4:77:
f2:e9:8e:fc:c0:01:86:26:86:7f:fc:fc:5f:58:9c:7e:f1:52:
c1:8b:9c:c7:7d:87:78:1c:80:8e:ea:02:98:c3:07:65:5b:aa:
91:24:2a:b1:de:16:b2:80:fe:06:1e:46:6a:9d:de:67:9c:57:
d3:b0:f5:c4:16:d1:9f:ea:81:2e:3b:54:f5:6a:43:51:9f:25:
86:d4:db:9a:66:7e:7e:d7:ac:15:a5:0f:a3:33:a3:dd:80:e4:
3e:35:15:26:45:7c:68:06:7f:f0:7c:0c:47:5b:ee:f1:ad:1d:
b0:36:df:6e:35:4f:65:ca:f0:69:df:39:29:4a:b6:c7:17:9f:
eb:ed:2c:64:98:70:e6:79:f1:ec:c5:21:5e:38:2d:da:86:6f:
a9:7a:d0:e7:b9:ec:c9:92:fe:06:c0:24:1f:8f:f7:40:51:4e:
f9:2d:72:1b:f4:7d:e2:d6:46:6c:0e:a7:b1:cd:0e:2e:30:fb:
25:1a:12:04:f3:31:76:a2:94:41:f6:0b:8a:88:31:37:56:6c:
d8:3f:76:e4:1e:58:06:46:6e:c1:98:1d:a0:7c:a2:a9:65:41:
9b:37:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client