Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: VxIc019Yi+44OE0aT4sPGgFBp0m97ebJc+8/hGUsb3o=
Subject key identifier: 7F:F2:C6:B4:D2:EA:A2:25:75:D6:41:E3:33:59:EF:00:FD:86:4C:2E
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 019D38D2D868C8C89E6B80A2D27679F4C873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: 36CB5eigCHYIuRmXqrnDW_-F3Xc.roa (hash: KcH/S3GFg0T0gWVpA5XkZVyUjTJRMZNW3hzXP6Ng0zo=)
2: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: VLfAygsec9nMErI8Oko9FSC/cnrc9vfVg8+EbkL3qHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d8:68:c8:c8:9e:6b:80:a2:d2:76:79:f4:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=7ff2c6b4d2eaa22575d641e33359ef00fd864c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:27:f2:56:4a:86:5f:6e:76:91:81:8f:fb:
25:f9:a9:a4:be:63:51:18:36:3a:38:fb:20:37:0f:
4a:d3:39:14:72:2e:7a:f9:93:81:4b:ae:81:81:e1:
3d:35:10:d1:6e:a3:ae:aa:0d:fa:ea:6f:d9:15:f9:
b8:a7:ad:bf:32:8f:bc:01:76:e4:e4:0d:dc:69:a2:
aa:72:e5:27:4b:09:c4:58:c1:8b:99:fa:20:32:db:
75:ae:f6:6e:ae:19:a4:46:ba:12:80:ee:d5:e2:e0:
d1:fc:01:7b:04:83:77:58:76:dc:20:e5:47:b7:a8:
0e:70:21:fa:2d:0e:7d:bc:21:39:b4:37:b4:77:f8:
49:c1:02:1b:4f:91:f6:87:d9:f5:f1:85:28:4c:ec:
54:3d:ff:4d:44:88:c7:e5:a2:8a:9d:51:0f:d7:44:
54:fe:44:c2:a2:1e:db:15:ce:7f:eb:ab:d1:45:a5:
92:db:0a:0c:f4:4f:44:ff:6b:5c:bb:4a:26:61:b7:
d5:47:26:db:a5:3d:a0:b8:26:87:3e:af:10:83:11:
fc:1c:47:92:5c:54:02:f9:d4:15:8e:54:d9:b6:2b:
36:64:65:0e:fe:68:9b:0f:0d:aa:9f:3f:9c:10:54:
27:23:54:10:cb:10:ef:ff:f8:5f:b8:f2:68:b0:86:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:C6:B4:D2:EA:A2:25:75:D6:41:E3:33:59:EF:00:FD:86:4C:2E
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:26:e2:fa:57:63:6f:c3:40:ba:00:cf:3e:fd:4b:3f:29:
41:45:5b:d2:c2:83:ff:dc:28:12:04:8f:d3:93:7c:b1:cf:c5:
69:c2:aa:68:e2:64:90:de:48:3a:b1:d6:68:b2:a3:05:8e:eb:
c8:8c:0c:04:21:12:2c:25:c1:04:70:7d:f1:7c:cb:29:1b:19:
de:be:62:14:29:c5:23:bf:07:31:f0:11:48:f0:6a:28:4b:1d:
73:c4:5f:c1:d8:63:65:ec:71:bd:11:02:00:07:53:ca:b5:98:
df:e6:7a:11:a8:aa:56:c3:c3:7a:a8:71:e8:00:4d:d5:b9:cf:
85:b5:42:99:cc:17:e8:17:09:15:8d:a0:18:40:b8:84:45:ee:
b3:92:a1:db:8c:4c:51:33:d0:9a:b9:82:69:76:36:1d:34:bd:
a0:d0:8b:a5:33:79:df:94:0e:f2:38:30:f9:45:2b:37:b1:4a:
e6:7f:5b:3c:cb:d4:c9:33:a7:8e:c7:da:95:ca:72:58:e6:4f:
1b:24:63:ad:3e:50:09:8e:81:58:f6:2e:d9:03:78:ba:a9:45:
04:1a:3f:ec:68:c8:9c:c2:90:2a:46:5a:1b:5a:27:38:aa:67:
e1:a6:3c:96:3c:36:2f:5e:ca:35:b5:65:9c:12:d2:bb:ae:73:
a1:86:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:14 2026 by rpki-client