Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: KZG1tslkDGv/U5yHps9Vdb6TNtd0b9es7plYZhzoj3o=
Subject key identifier: B7:DB:38:5E:C9:EA:AB:A9:EB:9A:1E:54:F2:7F:B6:25:91:67:0D:BB
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019D37F74D11D476A9E2D0EBD7B303EA2C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: v1tBnww3dCzEXNMUNa0VTlvQ6LA5+kMnDAtSzjsagl8=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4d:11:d4:76:a9:e2:d0:eb:d7:b3:03:ea:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=b7db385ec9eaaba9eb9a1e54f27fb62591670dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:f5:9b:ba:da:de:5d:a5:f1:0f:d2:0d:1f:
8d:25:68:82:55:4b:dc:0a:05:85:4d:da:97:1d:ac:
77:f5:a8:ac:f7:09:d1:a6:c3:4b:f3:e9:e5:b7:e3:
5a:79:a6:50:27:39:e1:0a:ce:fc:93:ce:71:f8:01:
c0:67:ae:df:02:aa:e5:82:61:13:2a:3b:cf:9c:e6:
7a:ec:69:d8:8a:1c:d6:8f:cd:9f:09:ff:a9:f2:f9:
0c:15:8c:e8:58:17:24:17:c6:5d:21:39:24:d7:2c:
e6:dc:58:ae:bc:09:03:9a:41:53:f8:c7:be:a6:49:
f7:e2:0a:65:2e:da:69:3b:49:5c:05:17:72:85:23:
44:d1:72:02:41:b8:d2:93:2c:aa:af:9c:dc:10:cc:
a6:2d:1d:21:a6:7b:6f:95:1e:aa:37:77:75:42:c0:
25:a6:20:29:f6:f4:01:a1:5a:5f:0b:e5:19:74:00:
b8:25:32:b9:80:07:c0:69:5a:f9:09:0b:24:00:e6:
93:c7:f6:19:2d:7b:25:14:1b:f2:61:4f:88:a5:11:
e1:2b:27:fc:49:90:4f:55:e6:8b:35:4f:c6:0f:e9:
3b:33:61:fb:7d:24:6f:0c:5b:0c:88:9f:06:03:08:
44:6e:bc:45:9e:b0:9d:6f:dc:75:21:dc:79:a9:7f:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:38:5E:C9:EA:AB:A9:EB:9A:1E:54:F2:7F:B6:25:91:67:0D:BB
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ec:36:69:6d:10:5a:80:38:53:65:a5:0b:32:d7:3c:94:bd:
2f:1c:56:0f:1c:6d:18:44:8f:9f:2d:54:6c:7d:00:2d:dc:0d:
3a:e6:56:7c:ec:88:ec:ed:c0:ca:7b:2e:fe:e7:e7:6b:52:2f:
cc:be:4f:3e:ea:3e:59:a4:ba:ba:47:68:d9:c3:96:62:fb:4c:
9e:e4:6d:85:76:55:63:14:52:d6:01:bb:2d:fd:65:69:27:73:
0d:86:60:d0:38:dd:90:59:4e:23:eb:ec:11:39:43:08:71:01:
be:aa:67:ca:0f:1a:65:d6:d7:da:b7:67:5d:2d:fc:b0:8e:4c:
11:fb:82:49:b7:7a:55:a4:fd:a2:1e:ae:55:0e:38:08:ae:4e:
94:f0:15:fe:0d:72:ea:b3:8d:5a:50:b3:47:cc:44:03:35:e9:
69:fa:19:1d:15:9e:f3:2f:f1:e6:3d:71:1f:76:e5:8f:46:64:
59:f0:18:d3:08:9e:b5:34:0f:7c:66:a4:99:58:86:63:15:eb:
20:7f:24:52:af:db:d8:5e:a3:98:89:26:b8:f9:46:5d:e7:c9:
c9:84:35:84:e3:37:02:b6:06:7a:38:cc:75:1f:5f:98:c6:54:
bc:e3:70:02:7e:54:1a:25:a0:26:2a:6d:83:7c:b9:11:bc:36:
32:60:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:47 2026 by rpki-client