Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: 7x3KN3n1E2aHtFyDw8TDbXxzPqiTzzOfRwG8lA22mno=
Subject key identifier: 4E:76:83:07:BB:49:97:5B:51:E8:DD:03:77:EE:EA:DE:B8:78:3A:A3
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019D39417E4445031F03FA931DA466DDC6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 183C
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: zDBXby/ykrlKgul6teBfSTTCXkF5jy6McVT0GfIEjB8=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7e:44:45:03:1f:03:fa:93:1d:a4:66:dd:c6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=4e768307bb49975b51e8dd0377eeeadeb8783aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:c0:f3:b8:1e:16:08:24:c8:b0:2c:a5:20:
c8:f5:53:d3:fa:eb:63:d0:3e:09:68:45:8b:f6:51:
42:88:f4:67:05:9a:2d:20:f8:47:90:63:c0:13:c9:
a5:6d:2e:64:ac:95:ef:07:34:bb:88:45:dd:28:c6:
91:aa:c6:2d:b6:15:31:a4:a9:9c:b3:ad:6f:9a:da:
fa:ec:b6:a8:be:38:58:40:c2:af:fa:da:31:5d:f6:
9d:03:f8:29:f8:3a:c5:9c:4f:d1:35:8a:e3:5e:aa:
1d:7e:e7:63:c4:92:d6:ef:3f:a6:64:f9:67:11:fc:
68:3b:ba:b1:5a:bd:8f:29:76:c8:ee:ce:45:3e:90:
02:1f:6e:00:eb:09:1a:60:d6:53:c5:69:b3:2b:12:
01:61:00:47:a0:cb:7b:a6:a9:57:2a:e3:11:61:a0:
01:92:33:1e:f9:bd:ab:95:58:35:89:1d:12:b8:95:
bd:fa:35:f8:01:3d:9e:4b:48:b3:9b:67:3b:16:af:
74:be:a6:5f:5f:ae:d7:00:f7:99:ab:2c:af:56:ed:
c3:e5:ca:25:f4:64:b4:86:61:3d:e0:45:40:2a:51:
f4:c9:3c:ed:36:12:20:e6:c4:dd:5d:89:e9:ec:d1:
f7:c3:7b:9e:43:f2:ac:d3:0d:d9:23:dc:d0:17:a8:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:83:07:BB:49:97:5B:51:E8:DD:03:77:EE:EA:DE:B8:78:3A:A3
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:d6:bb:cc:54:7f:80:09:ce:81:aa:72:e8:fb:2b:72:1d:
ba:87:53:73:93:58:43:6f:22:dd:28:ad:17:22:ba:68:25:4c:
f0:19:33:e4:36:97:16:bf:bf:86:c3:0d:38:27:77:dd:96:06:
5b:de:cc:c5:7d:71:4b:1e:41:92:57:c5:a5:81:3d:2d:ce:7d:
37:98:37:d2:27:08:05:9e:75:8c:2b:a2:e6:68:08:58:d8:80:
d8:2f:48:2d:12:3a:fe:67:57:47:ad:79:d8:df:d9:a0:63:31:
cb:78:36:98:26:ab:eb:36:9d:7b:5e:ab:36:f8:73:d1:06:3c:
94:2b:1f:1d:f2:c4:3a:dd:cf:27:e1:da:f9:6a:1e:e5:f4:bb:
81:d4:62:ed:90:2c:e2:65:c4:bf:41:ec:3e:9b:1d:11:5b:8e:
72:e3:1f:30:12:e1:12:ab:13:75:b1:53:8e:6c:e3:9e:40:16:
b8:82:fa:96:da:a7:df:5e:08:86:d2:b7:c7:54:48:7c:64:d1:
fa:8b:16:d5:54:85:b5:47:5a:1f:12:5c:78:fc:8d:ff:f6:8b:
58:50:64:d1:96:ed:65:b9:14:d1:d0:81:0e:96:4e:52:09:be:
8d:6c:d1:f6:0d:df:97:64:97:c3:f0:33:51:c7:7c:4b:ec:94:
f7:8d:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:03 2026 by rpki-client