Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: kN1YP5HUcVK1XWBYh/pt5BiS9pB3HUmXp1eZ2PooB9k=
Subject key identifier: 82:33:DB:7A:5D:33:A1:AF:94:AA:CF:D9:85:93:D7:49:6F:0C:2B:D6
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 019D378932B1E2E6D8C899801AFA2C073319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: BCZK3k+PB8q9zTGKn3CP0Z1vEwntziklRvwDdvKmScQ=)
2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:32:b1:e2:e6:d8:c8:99:80:1a:fa:2c:07:33:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=8233db7a5d33a1af94aacfd98593d7496f0c2bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:12:d2:d2:a0:ec:c1:e8:5a:31:ef:5e:71:
bd:88:d8:d3:3b:b8:e3:6e:08:75:07:60:d1:5b:a3:
96:fd:01:38:05:2f:30:cb:96:c9:2a:29:c0:3a:00:
e4:5b:63:24:1f:30:b3:b0:d6:ea:16:88:e0:4c:1b:
f0:b2:03:13:e0:6e:4e:07:79:a7:af:77:fe:4b:6d:
ef:8b:4c:72:87:01:1d:49:b7:85:58:a6:f3:58:b2:
05:bb:56:16:4d:9f:f4:2f:ad:37:80:e5:4a:7f:5a:
66:be:0f:e1:a3:72:1a:be:49:98:65:3c:99:b9:7c:
f8:f1:ec:57:f0:f1:6e:33:e7:11:80:aa:70:17:70:
66:11:d2:99:27:35:1c:fd:ad:52:49:41:c1:a3:97:
4d:c1:24:e3:fb:14:2b:b9:17:13:d0:0d:fd:2c:ba:
6e:26:35:f2:d2:6c:ac:0b:d2:42:e8:b0:ab:5b:40:
ff:d0:a5:f7:55:0f:3e:ac:19:92:b0:5b:d4:c3:49:
52:10:2b:a0:dd:2a:89:3c:41:0b:ae:a0:4c:88:04:
68:81:97:a6:68:6a:56:e3:95:7e:98:4b:59:6f:c8:
f2:5c:4d:58:63:91:aa:d7:d4:06:57:16:9d:61:10:
e7:ac:90:f8:7e:87:7d:51:d5:d0:0b:6e:69:0f:37:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:DB:7A:5D:33:A1:AF:94:AA:CF:D9:85:93:D7:49:6F:0C:2B:D6
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ba:51:07:45:bf:79:df:c8:5d:9c:11:90:60:14:57:e6:bd:
da:8e:48:e2:44:db:78:aa:e8:e0:cc:88:01:2f:ea:62:ca:e6:
ca:b1:bf:8f:43:f7:98:67:a3:69:98:99:b1:78:33:c2:9e:36:
ca:f6:65:87:30:88:04:1a:30:1f:1d:76:44:7b:be:60:82:b0:
c8:a4:38:99:1e:3a:a6:9c:74:c6:55:f2:e9:71:24:00:1c:03:
24:8b:d8:29:da:40:00:92:a3:98:65:92:f7:c6:07:ca:37:16:
8a:a0:5b:a3:0f:a7:df:6e:c1:a1:29:a4:4d:9d:d1:db:21:95:
c4:55:34:fc:58:ab:2c:ac:dd:31:20:f2:5a:51:d8:28:00:79:
1b:1f:d4:04:83:4b:15:a6:14:1a:e1:b5:c9:f8:0f:48:f2:12:
75:52:26:07:5e:cb:a6:27:a0:81:34:3b:91:cc:a5:e2:e4:8a:
0a:9c:04:cf:d9:b9:09:2d:ab:0f:1b:85:18:f8:59:7c:52:08:
73:b9:a6:7a:08:dd:44:29:47:76:db:e8:95:7b:07:d5:19:2f:
30:9f:7d:f0:33:cb:8f:79:9a:18:b5:db:0e:e9:1a:0b:2b:2f:
9c:a6:19:a1:27:ce:c2:6e:d4:95:01:36:ca:65:70:b3:72:2c:
d6:72:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:39 2026 by rpki-client