Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: 7+G2u8mqzlIXuIt20VQh8T+pDRZLA50qXc2vLBb9UC4=
Subject key identifier: 04:39:DA:7A:1F:5E:70:98:F6:08:DF:E3:84:39:32:14:29:10:52:D4
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019D382E382F63B7973E362A8B92867D2A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: qbebZuewknT/enzfmrAn1nVwF10q4urAnGe+YcEsx6g=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:38:2f:63:b7:97:3e:36:2a:8b:92:86:7d:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=0439da7a1f5e7098f608dfe384393214291052d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:e8:c1:a8:4a:97:1d:d7:db:2e:6a:76:d7:
48:c7:82:85:e9:62:8b:3c:1d:c0:32:19:34:05:e4:
e4:1d:29:2f:fe:2d:ee:f6:a7:83:93:62:02:d1:a9:
7a:32:77:d6:40:c4:22:d9:75:f7:ce:c0:30:04:90:
23:e1:9d:d2:f3:e7:c7:53:dc:e5:8d:5f:4d:26:dc:
0e:48:51:1f:15:0e:52:5a:6f:6f:6c:39:b3:65:a0:
2a:9a:aa:c5:89:e9:e9:0a:cc:f0:9a:1b:b8:47:53:
69:e2:28:ac:1f:f4:5c:ff:5b:ed:7b:8f:bd:48:2d:
ec:39:8f:55:01:c9:89:77:57:18:ef:1a:6a:f0:bd:
a4:d2:4c:63:71:27:9e:47:fe:a1:70:d8:f3:5c:ba:
b0:7c:28:8d:3e:45:56:0c:42:9a:43:d9:a6:e0:53:
7b:49:df:3f:0b:65:eb:4f:24:c8:b3:d6:0b:04:fd:
44:4d:bc:54:74:cf:eb:78:2f:a8:e7:df:5b:b1:a2:
e0:8f:4f:7f:ff:a3:85:9a:1a:04:dd:b8:b2:33:f0:
e8:c7:5f:a4:de:55:d2:e0:28:53:b4:f5:e9:b3:6a:
42:8a:e9:8d:60:db:74:5b:33:bb:77:d4:04:2b:cc:
b1:f6:41:39:7f:74:7d:1e:73:3a:18:d5:91:d4:28:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:DA:7A:1F:5E:70:98:F6:08:DF:E3:84:39:32:14:29:10:52:D4
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:80:b4:6d:73:06:5c:c9:4e:40:f6:4c:2a:12:ee:d6:13:32:
3a:47:b9:33:f7:1a:f2:24:06:d0:94:1e:cf:07:46:62:99:89:
44:64:57:02:a2:cb:78:ad:0f:c9:fe:c9:76:dd:39:a3:8c:3f:
a2:c3:6f:fc:0f:0d:17:a7:ef:1d:3d:5a:d4:46:04:d3:0f:92:
2c:31:5b:e9:95:f7:36:d7:d5:6f:f4:13:e7:8e:25:08:9e:5a:
38:ba:ca:fd:b9:48:04:67:b7:b7:76:33:93:a8:da:c0:51:56:
55:39:bc:26:a4:fc:68:c3:fd:7a:8c:69:f3:ab:60:a4:50:a8:
f0:52:bb:72:3f:fa:7c:51:28:78:6d:ff:ae:cb:95:7f:0d:c2:
1d:5a:cf:47:a4:95:79:f1:9c:b1:20:4c:e1:f7:10:94:11:12:
da:58:65:c6:ed:90:16:01:d3:0b:0e:78:ae:04:5f:79:af:44:
7f:04:3a:71:fd:a9:f8:01:12:d3:8b:32:80:5b:c8:91:f2:aa:
b3:88:99:72:c1:76:be:74:01:2d:83:ce:85:36:8b:1c:72:e0:
5a:b2:98:30:4f:4f:cd:26:8b:92:f5:db:72:f2:f3:62:ef:c2:
cb:a8:c8:9d:fc:47:c1:31:eb:47:1b:2d:14:fd:46:b9:f6:1d:
a7:b4:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:08 2026 by rpki-client