Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: q7GXTTxM+FtBF6YdhistKpyA6tyywOiBfLc9H7n9nw8=
Subject key identifier: 63:44:40:11:65:4E:DD:89:95:79:16:09:1D:69:97:0F:C5:A2:63:FB
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019D386632F3F408A0E241F288E319631CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: INyUXq8LM6jl7ZZo7FxszLSiVvtNE5MPRkrmp0tw1vw=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:32:f3:f4:08:a0:e2:41:f2:88:e3:19:63:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=63444011654edd89957916091d69970fc5a263fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:03:fc:bb:cf:c9:91:00:13:54:85:5d:bd:
c0:f8:31:a1:d8:ec:7f:b9:97:1d:c6:94:08:c7:d6:
13:e1:61:7f:5c:e7:7b:14:57:3c:1a:d7:9a:ed:99:
db:a1:80:94:40:65:19:c4:bb:9e:f0:9b:ed:94:5c:
a8:57:5d:06:b1:83:33:62:68:c4:69:d7:9f:23:76:
8e:13:4c:36:28:a6:32:85:08:d4:a6:94:2c:4d:5f:
0d:9e:6a:5a:15:9e:35:a8:7a:94:a4:69:c0:80:30:
72:c7:a6:55:66:76:2d:46:b8:45:1b:fa:b7:5d:f6:
6e:a7:30:50:fd:2b:38:ee:08:be:39:3f:5d:77:df:
51:bf:92:9c:8d:da:79:59:dd:81:a7:64:49:4e:53:
b4:30:0d:85:08:38:83:d1:b8:ab:97:b1:9c:50:d2:
bb:6a:84:8c:6d:f3:0f:dc:7c:9d:fd:5c:35:03:6f:
3f:8e:81:2d:1a:7c:a2:9c:d5:2d:33:36:5f:aa:82:
cf:5f:b2:d5:ac:4d:51:76:ac:85:f4:e7:6b:3a:e0:
85:3a:7c:d4:9d:43:08:d7:d3:dd:47:7d:46:b1:cb:
fd:8d:d5:20:ed:af:4e:ed:80:a6:e9:8b:81:09:2b:
1f:30:e3:2b:8a:f8:1a:1b:9d:4f:7e:ef:67:e0:b8:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:40:11:65:4E:DD:89:95:79:16:09:1D:69:97:0F:C5:A2:63:FB
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:9a:db:00:3c:e2:ba:ad:f7:c3:b6:cb:04:91:a1:19:c5:
a8:b8:d2:9b:2b:15:96:c2:aa:30:f9:21:9c:27:24:91:8d:5c:
17:b7:d0:58:20:4f:bc:a9:44:d3:f0:24:5a:42:01:62:65:af:
5b:8e:59:58:d7:b3:9d:c2:ae:e2:0e:f9:4a:78:3a:a6:de:a9:
6f:29:32:71:4b:db:a8:15:04:33:c7:c7:6d:23:59:1b:66:40:
30:af:5d:a8:6e:63:f8:01:c5:9c:1d:01:0a:5d:6c:08:31:06:
8c:73:6f:0a:14:fb:11:3c:95:f2:bb:cd:86:bb:d8:c8:f7:8b:
97:3b:3d:47:48:bc:b1:97:82:d7:68:64:80:76:f7:a0:eb:41:
19:23:f3:83:c3:ac:d9:56:9a:00:ed:51:dd:29:84:73:a6:2b:
d3:80:45:07:c2:eb:56:b1:11:27:b0:37:a4:80:3d:83:1f:c3:
47:12:d5:1f:58:52:ab:8f:4c:2e:67:58:22:56:57:47:fa:8c:
d8:81:4a:74:7b:d0:e7:0f:c2:16:d4:35:18:34:60:4c:04:0d:
b0:93:f9:e6:88:cc:44:c8:b7:a4:2a:18:43:a3:b5:6e:21:de:
84:83:41:35:4d:5e:b5:44:75:82:d2:fe:a2:60:b0:d1:d9:15:
90:2e:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client