Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: kLmRYPKpPXDigXR/fb4ldiIp/8LcTQNuB4V4S0Mf1Io=
Subject key identifier: DE:BA:FC:B6:43:58:B4:71:C0:28:22:B8:A1:5F:B9:04:8F:80:4B:B5
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019D37C06D72E39544286DE28F02B96AAABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: 7B0qaXf5bNLsVr6MZ0YR/ZuiR2a5vqf3TIy6uXmugd0=)
2: gPlEqEZzfnSTUwltcGMsedRBQ1E.roa (hash: 38esTkQDBO03GfM8yJINP0QbftSi3sYtaXAqJp+R6Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6d:72:e3:95:44:28:6d:e2:8f:02:b9:6a:aa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=debafcb64358b471c02822b8a15fb9048f804bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:f2:0e:bd:f3:cc:42:a7:79:81:ac:95:18:
be:1f:b6:c6:56:6f:55:3d:07:db:20:27:36:f2:de:
f0:e6:58:82:5d:56:63:b4:1a:5d:22:f5:7d:09:ac:
e7:fb:bb:49:e8:f1:7b:de:a4:1f:da:aa:1d:ba:d6:
bb:e3:b1:cc:5b:23:d6:08:4c:55:d1:25:73:50:08:
bc:3e:2a:98:a1:c7:98:d1:c7:ee:81:07:d8:42:17:
12:dd:64:6e:79:9c:e5:d1:cf:71:0a:ca:ce:9e:0d:
2a:df:82:9e:59:e2:99:5d:cb:b3:bf:c1:31:97:15:
e8:ce:33:9b:7d:6e:ef:98:f1:f8:38:4f:26:1d:d2:
ce:16:68:b9:fc:5c:03:63:99:1f:9b:88:f0:45:38:
21:2d:3e:ca:a6:8d:a7:b2:31:fa:e9:74:8c:19:bb:
5c:4e:36:4c:87:b2:4b:f2:4a:06:bf:7c:00:3f:59:
74:70:44:24:7d:a6:05:0c:ee:fb:0d:80:e9:c4:b8:
90:52:e4:9b:db:9d:60:6a:83:93:44:29:df:52:34:
2f:d5:4f:6b:84:41:43:b7:e9:16:a1:87:3f:3a:85:
f4:9a:9f:17:83:8a:e6:10:87:61:2e:fc:cc:15:55:
7a:19:57:4d:0f:7c:6f:74:39:f7:b2:7e:0e:0a:88:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:FC:B6:43:58:B4:71:C0:28:22:B8:A1:5F:B9:04:8F:80:4B:B5
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b1:28:9c:ab:06:15:f7:9f:41:d6:15:88:ec:63:30:2c:f3:
c9:41:06:02:04:dd:67:dc:ea:63:d7:c4:90:3d:f8:9a:ed:cf:
f9:d6:de:db:9a:55:96:c6:4a:2b:7b:ff:ae:b9:bf:55:8f:3c:
39:e1:79:e3:3c:59:46:d5:1b:43:c2:26:8c:13:d5:ad:bf:b6:
e3:2c:63:79:a4:b3:a1:43:4d:cb:3d:67:4b:6e:7a:bd:21:f8:
1c:de:87:d5:36:58:94:fb:a2:d4:67:13:fe:88:8a:9a:ff:86:
cc:56:85:db:dc:96:58:a9:73:6d:28:15:4c:d6:1b:26:7d:1c:
8d:c5:65:ab:07:bd:6a:b6:9f:58:d8:9d:a0:6b:6b:49:c4:b6:
31:68:41:bc:22:3c:f4:01:dd:df:24:6e:1a:be:9b:7f:43:90:
e5:00:ac:21:b7:01:c8:0d:53:a9:36:b5:5f:af:31:2d:de:35:
7a:5e:e1:29:fa:b7:37:95:01:10:38:46:7b:d7:ec:5e:c4:53:
01:02:19:43:98:ac:71:60:7d:00:62:2d:1c:61:70:b1:b2:d1:
1d:62:ef:44:16:f2:77:46:79:00:74:91:66:6f:2d:7e:1a:ab:
b2:4c:c6:88:fc:1b:da:29:ee:29:f0:35:cd:18:b1:57:30:a7:
75:e0:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:03 2026 by rpki-client