Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: ozi4/3r3UfGEOZmEZbaSsRSQV6TpOJm3KVdkNZr03Gc=
Subject key identifier: 9D:18:41:27:E2:E1:92:CF:33:A8:A3:59:74:21:C8:09:78:C1:B8:43
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019D382DD65D21109401E0AFA17A7195FDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: PtgasTgfDNNblcaUSEPzEijzZxYITAb2pVF0d0qIgkI=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d6:5d:21:10:94:01:e0:af:a1:7a:71:95:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=9d184127e2e192cf33a8a3597421c80978c1b843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:d0:c0:91:64:e8:8a:f4:9e:13:79:78:97:
f9:7f:47:17:6e:19:6e:c5:cf:da:eb:01:69:b0:4f:
9b:18:74:81:37:d2:4c:70:06:b0:a8:d0:79:ad:13:
8a:52:30:c0:c1:1c:25:58:f5:72:4b:03:e5:2b:bd:
59:a1:9d:9f:22:ae:f6:1b:5b:95:6e:ba:1b:0f:68:
f5:c2:bc:ad:a2:5e:18:1e:e8:a0:db:b7:5c:82:10:
7b:89:5c:88:46:b3:89:58:c8:d1:76:24:1f:76:f8:
0c:6a:cd:97:69:f4:33:b7:14:56:2e:fa:cf:b4:d8:
da:79:92:38:57:7d:03:e3:f3:3f:4f:f9:bc:0c:60:
18:ef:5b:97:19:39:e6:e2:df:74:06:19:cd:ef:e6:
d6:67:f1:ba:40:cd:0a:f7:19:4e:f9:55:64:45:c3:
9e:ca:d5:38:90:c9:21:b0:65:f1:f3:da:30:fe:d0:
8a:b0:79:e3:fa:00:c2:3f:61:21:88:bd:8f:1c:6d:
db:e7:d2:04:b3:05:3e:4c:d7:dc:18:80:f7:11:6d:
19:b7:32:d1:c2:b7:1c:ab:2f:50:8c:be:5d:cb:a8:
d5:98:7e:72:dd:de:0f:ac:09:c8:d8:f6:c1:a0:52:
50:25:0a:70:78:81:65:e7:d0:06:4d:9b:84:2a:6f:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:41:27:E2:E1:92:CF:33:A8:A3:59:74:21:C8:09:78:C1:B8:43
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:02:6e:ed:8b:09:d8:08:1c:3e:1f:9c:a9:b1:bf:22:a1:
79:df:de:42:35:83:fd:8d:37:3e:32:e1:98:89:1e:f7:51:bb:
3b:90:cd:cf:61:17:c8:9e:3a:27:92:36:93:15:02:7e:79:0f:
59:52:0c:36:6c:3e:15:ea:26:a8:ea:c8:ee:ba:d6:69:ce:cd:
2b:05:d1:a1:d7:a5:c4:f5:e2:a4:b2:89:f8:77:6c:ec:42:a4:
c3:c1:24:ef:8b:c4:16:ce:75:a2:91:5b:02:d1:73:7f:74:e0:
7b:17:90:5d:cb:45:18:5a:b5:80:cf:0e:85:d3:42:14:15:74:
35:59:04:ad:41:27:e5:82:71:9a:eb:27:07:de:04:7b:04:35:
4a:98:d7:02:5c:36:9d:b2:9f:3a:a7:9e:eb:97:89:3a:ad:07:
b6:1a:39:46:8d:a7:32:72:72:36:65:3b:b7:8e:dd:13:6b:34:
e5:65:23:2b:3a:c9:da:05:6c:18:0a:eb:6a:72:6e:07:3c:af:
f6:80:5a:00:7c:b9:f2:ca:95:0c:ee:6f:34:f8:3f:88:89:8a:
b1:00:f9:ec:45:9d:cc:37:44:7e:39:d3:85:94:a9:c2:30:fc:
26:9c:45:c7:00:69:f8:bc:4c:5c:22:86:30:df:ef:75:5a:8c:
d5:3b:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:56 2026 by rpki-client