Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: WcOWGYsOJTkZMILv/NOBh9z3PZDrVvlP8IfOqYkI18E=
Subject key identifier: 1B:CC:96:C3:35:18:F3:D6:3F:EF:AE:E6:D8:35:32:AA:52:1B:A9:59
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 019D3752C588B565BBB1D57703B199EBCCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:04 +0000
Manifest this update: Sun 29 Mar 2026 02:01:04 +0000
Manifest next update: Mon 30 Mar 2026 02:01:04 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: nVzF9MB2VhysHXC9/r9eieED2Y436FC74mClO8XhEfg=)
2: UQBamIu_tf9wPCOvESltx6uxaSM.roa (hash: 0H4wa03fUeDSOPCaqZfvn2P/bbZkgwu98158FsqzTX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c5:88:b5:65:bb:b1:d5:77:03:b1:99:eb:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Mar 29 02:01:04 2026 GMT
Not After : Mar 30 02:01:04 2026 GMT
Subject: CN=1bcc96c33518f3d63fefaee6d83532aa521ba959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:b6:2c:05:17:d2:39:c3:bb:72:2a:e9:52:
ea:98:75:3d:2e:ce:87:9f:7e:7a:a5:e5:1d:89:da:
bd:23:7b:9c:ca:75:bf:41:05:59:e9:5e:90:a3:86:
2e:5f:7b:0d:6f:ee:07:95:9d:f8:a3:d6:f2:ef:f4:
14:c7:04:c0:bd:ba:0d:69:30:08:7d:23:84:38:bf:
9f:2a:98:81:59:6d:5f:8a:ea:51:16:65:d1:73:81:
e8:12:67:ac:14:af:fb:10:14:00:1d:3f:22:dc:49:
7e:27:da:dc:ab:eb:ab:b7:da:00:57:5c:7b:fa:87:
7d:1c:62:a2:20:f7:95:db:d8:7a:26:ac:01:7c:76:
9c:10:e4:73:11:35:3b:52:4b:f3:34:e5:2e:b0:7b:
dc:67:a9:a9:51:be:c9:4d:de:12:28:3e:ea:12:c2:
66:75:4c:53:9f:bb:6e:5a:c2:54:81:00:ef:e7:8a:
82:c3:9e:ec:18:a5:ff:ba:fc:0d:73:14:e0:0d:18:
a6:fa:da:9a:75:f6:a0:b3:32:fc:a5:a4:1e:a1:ac:
29:91:ac:0c:2b:bc:53:5c:43:07:ff:5c:76:3b:a2:
82:01:16:be:b7:97:b8:b0:c2:6e:58:4c:41:ac:2b:
19:a5:e4:cf:71:1a:6c:38:a4:d0:5c:f5:65:a6:d4:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:96:C3:35:18:F3:D6:3F:EF:AE:E6:D8:35:32:AA:52:1B:A9:59
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:81:30:d0:f2:92:6f:1c:42:ac:3e:48:05:b2:1a:b5:4c:70:
23:d8:89:fb:7c:11:9d:bd:71:f1:53:c5:b8:df:83:38:25:c7:
cf:cc:3e:3f:2f:05:4f:0a:7d:fa:8f:b6:5b:41:e9:ff:1c:7e:
b2:b0:f6:ac:79:c8:21:c6:d2:ba:09:9c:3b:12:c7:cc:e6:c6:
88:6f:8e:93:76:8a:fa:aa:41:73:76:95:91:32:2f:29:63:81:
d6:1e:a7:3e:1f:a3:d6:26:7b:3c:c4:d3:ae:97:8c:f2:3f:35:
6f:32:ca:3c:50:90:29:64:ff:d7:10:a5:7d:8a:8a:06:13:75:
ac:85:fe:9f:a9:c8:ea:b5:c8:de:a1:8a:0a:0e:f4:1d:ac:70:
4d:1e:08:b0:b7:27:75:fb:17:4d:17:45:39:8a:54:a8:06:3b:
9b:e9:fb:09:3e:33:f6:92:cb:2c:34:e5:db:8b:f4:97:d1:3a:
f3:b9:b2:b6:98:03:e7:45:d5:8f:c8:d4:06:77:9d:11:bf:2f:
51:eb:fc:3d:47:e2:16:06:0c:73:43:1a:97:ca:c5:30:fc:e2:
8c:3c:f0:a1:fb:04:3f:99:0b:49:dc:d4:ca:69:92:76:85:f5:
43:f1:bf:46:54:7a:38:f8:ba:a7:a9:12:49:56:aa:79:ba:a9:
02:0e:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:49 2026 by rpki-client