Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: QkSpTUlEj6yYEG/bttfA3yf8IPmkefQ1Cf5LpUnam+c=
Subject key identifier: EF:BE:95:3F:83:8B:94:80:E8:D7:AF:77:ED:AF:EE:F0:8D:F1:8D:09
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019D390A7D976E8CB874FEE911E3538C9349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:01:21 +0000
Manifest this update: Sun 29 Mar 2026 10:01:21 +0000
Manifest next update: Mon 30 Mar 2026 10:01:21 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: M6SGdeBRgy4zTmiquyyZOpwb5kX1NiR/58KjJAV2kpM=)
2: cny5YunWoGOPcvtGZLymBoSxvc0.roa (hash: z2k+kuA2gEPwCUj1PQs/NjdvAeEDMEfFxUJYpvTthlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:7d:97:6e:8c:b8:74:fe:e9:11:e3:53:8c:93:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Mar 29 10:01:21 2026 GMT
Not After : Mar 30 10:01:21 2026 GMT
Subject: CN=efbe953f838b9480e8d7af77edafeef08df18d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:fc:5b:db:18:13:50:83:33:bf:f9:04:97:
58:d4:e5:69:ee:3d:73:4e:7c:b9:81:1c:89:b4:b3:
33:04:dc:64:0c:13:7b:32:fa:08:df:4e:c3:53:7a:
51:9e:b4:60:15:d1:ec:32:29:5a:00:36:75:49:1d:
cb:28:e7:ba:32:b7:30:bf:f1:fd:15:2d:97:e4:83:
5c:97:3b:84:0d:78:6a:44:f3:b9:57:1f:34:94:d0:
11:8e:95:79:5e:98:8e:d2:a6:0d:96:07:a1:81:ae:
57:6f:ee:40:68:37:5d:46:67:17:ad:9b:ab:0d:d1:
12:52:dc:98:fa:74:1d:02:73:e1:f9:ab:5f:dd:83:
f3:cd:b2:e7:70:88:58:8c:91:dc:b4:25:72:6d:d7:
3a:28:2c:27:29:3c:67:47:cd:00:4b:38:d2:dd:16:
4d:f3:c1:d1:2a:61:27:90:22:fb:0a:92:9e:44:8d:
d2:1c:8f:8c:7d:28:60:69:3f:0e:4d:ef:18:4e:d9:
a0:be:60:d5:0f:e3:58:13:8b:e7:fa:d0:47:7b:f0:
a0:ef:ac:90:d9:d5:3a:72:b9:83:57:49:d7:a7:f1:
a2:36:2b:ef:67:d0:be:85:58:25:55:f5:a2:5d:7c:
29:42:94:d7:03:d2:64:90:1b:01:af:38:ec:b4:17:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:95:3F:83:8B:94:80:E8:D7:AF:77:ED:AF:EE:F0:8D:F1:8D:09
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ae:49:be:92:7e:94:2e:0b:dc:d7:70:78:0b:22:0f:c3:ac:
f2:05:50:a0:ea:14:ba:ec:0f:0c:e9:4d:3c:9c:25:93:1a:23:
81:a1:2d:1f:98:9a:05:98:c3:6c:79:70:e8:2a:8c:3e:1f:37:
82:25:0e:ba:c0:c7:5d:41:42:c8:54:b6:71:63:d3:b3:ef:b0:
22:2b:e5:ec:9b:b8:37:af:08:f2:55:b1:44:48:3b:2e:2e:12:
9a:79:70:76:f8:03:bd:46:b9:0a:95:b1:eb:58:4a:2b:06:f9:
19:f4:d8:82:e0:81:17:1e:aa:50:ab:fd:b5:1e:7d:f0:a9:ea:
af:89:20:ec:56:25:b6:44:57:b7:23:d2:87:2b:79:e0:e7:74:
15:f0:10:7f:af:62:c0:22:98:12:59:a2:26:6f:86:c8:34:2c:
2f:b6:73:85:ab:7f:d7:01:c3:4f:c0:71:36:24:33:f8:16:fa:
c2:9c:38:35:e6:e9:8d:a3:fc:19:2b:f4:0d:20:a4:53:8e:f1:
1a:82:c9:d4:2d:e9:ab:8e:76:a0:94:7d:b1:7b:85:73:20:b3:
b3:5a:35:c9:b5:57:5c:51:be:76:e4:34:d6:15:00:d9:44:8f:
07:a0:88:f4:58:3d:8d:8d:82:18:a5:da:61:eb:2d:fb:48:20:
75:11:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:28 2026 by rpki-client