Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: cAN3dP7zFbCwcghgEqd9utpcyqlJhUp2VeSDuN4GGn8=
Subject key identifier: C4:92:BB:EE:77:DB:B9:C0:13:09:2C:11:26:76:88:91:5C:92:91:9B
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019D3977F68862A07236DDD8D32180676C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: kWwQeMS4oyDz6BOZK+vkf/lbfXum+6imPx0gEKPVGIk=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f6:88:62:a0:72:36:dd:d8:d3:21:80:67:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=c492bbee77dbb9c013092c11267688915c92919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:da:96:f0:5c:f4:91:f1:e2:3a:37:5d:97:
98:fd:b8:fb:a4:46:40:00:24:2f:74:cc:84:ec:46:
27:a0:78:f1:d8:cb:1e:5d:2d:64:7e:2c:71:23:6a:
a9:73:21:ba:fc:c7:8e:bd:28:70:13:28:ae:0c:83:
a2:5a:29:e8:20:a1:fa:1b:ed:95:fb:67:4c:d9:61:
07:98:06:bc:57:16:dc:40:a7:2f:be:6e:c0:f1:00:
28:18:a0:bc:76:67:6d:55:52:f2:bd:00:09:99:28:
e0:6a:01:a5:09:c9:e3:7f:f7:3d:1f:9a:c5:fe:94:
18:55:7a:26:cd:c8:de:af:87:40:6b:fc:82:e5:3c:
c7:88:a3:f2:a4:5f:a0:fb:d0:b7:f3:d3:b2:16:22:
2e:5d:90:31:89:c0:49:b5:af:59:e0:a7:ec:c4:3b:
5b:9c:fb:3c:81:8b:5e:32:5e:7f:ac:97:63:a7:70:
75:3c:69:9c:be:67:9a:ac:f0:f0:f2:30:68:83:08:
d1:74:f5:6b:75:37:35:3a:a9:e8:dc:71:a7:56:1a:
89:1c:40:dd:bf:2a:c0:4b:1b:ff:6c:ee:20:22:4e:
30:65:3b:8c:61:fd:a8:8d:87:2c:1b:96:a5:0f:3f:
fb:51:2e:dd:8b:15:4e:49:cd:ed:10:a1:bf:8a:25:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:BB:EE:77:DB:B9:C0:13:09:2C:11:26:76:88:91:5C:92:91:9B
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:6f:1c:ac:5b:60:83:26:c1:ae:ae:8d:af:03:70:11:0c:
d4:4f:81:0d:02:f2:ab:f6:66:06:45:b7:66:cf:b3:9d:b4:e1:
0a:1b:52:21:73:00:3f:2c:b5:47:32:2f:32:61:12:64:d7:81:
da:61:0c:57:28:9c:4b:fc:9b:63:c0:fa:38:90:33:19:d1:9b:
d4:42:db:68:65:8e:a3:ee:b4:58:ba:b9:fa:ce:d1:6e:1b:62:
7c:41:57:17:ba:e9:ae:d0:c0:73:22:01:51:09:b5:af:25:04:
10:93:41:32:34:e4:ca:01:db:e7:3a:fe:ce:d7:ba:1b:c6:eb:
22:a4:8c:46:75:54:c3:03:ea:00:5e:d3:7d:56:e8:f7:e9:69:
66:ec:b6:c6:b3:cd:8c:5a:1f:77:6d:24:36:77:ef:bf:02:7f:
27:21:13:52:28:6a:93:9f:a8:37:f1:23:70:58:39:ed:82:d2:
3a:af:cb:80:da:d8:9e:db:f6:f1:2b:be:f6:57:78:a0:3a:4c:
1b:d0:3c:ba:87:02:33:0a:c8:22:b5:16:f6:81:e1:35:df:6d:
b6:6f:89:04:b5:49:81:8c:98:99:ef:7e:5b:6e:af:d4:81:89:
ac:bd:5f:4d:c4:ff:62:49:8b:d6:38:63:11:0a:fe:48:e6:69:
f3:81:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:22 2026 by rpki-client