Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: Y6pgRqzDIlTDsHG6N24XVadnVfHjNPrEA23TjWLuCwA=
Subject key identifier: 9B:CC:0E:EC:3D:1D:A1:1D:D5:65:73:9A:92:3F:06:5E:95:9F:9C:33
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 019D3909A143AE3C3DE5257D67944ACC76C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:25 +0000
Manifest this update: Sun 29 Mar 2026 10:00:25 +0000
Manifest next update: Mon 30 Mar 2026 10:00:25 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: SV/XbAO+Da8L9cqXC5QuPwIBNS0kFdV8bJyzgw+GtU4=)
2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a1:43:ae:3c:3d:e5:25:7d:67:94:4a:cc:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Mar 29 10:00:25 2026 GMT
Not After : Mar 30 10:00:25 2026 GMT
Subject: CN=9bcc0eec3d1da11dd565739a923f065e959f9c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:40:90:11:f3:cd:29:67:df:5d:1f:ef:a4:
e9:da:ab:25:a7:16:25:f6:32:8e:c0:51:42:a3:09:
1d:73:fc:93:20:c1:e8:1c:a4:88:87:bd:e8:d9:32:
e9:08:42:0a:a3:77:09:5b:3f:c4:31:1a:01:54:f9:
8b:c7:17:c7:56:77:8e:4a:98:ab:04:6e:df:f5:5e:
5f:37:e9:fc:84:f7:5b:99:ff:f6:d4:d7:75:39:e6:
3d:02:f8:97:3e:b5:f5:05:11:43:c4:6b:73:95:af:
35:64:72:76:2d:26:60:cc:08:75:d3:31:6c:7c:f5:
39:99:0a:3c:30:bf:0a:50:17:7a:fa:0f:dd:50:7d:
14:89:be:4b:9f:15:49:fd:59:07:05:cb:12:71:10:
e9:14:5e:53:15:67:de:d4:8c:50:e4:16:00:4a:6f:
97:f2:cd:c8:f1:2d:59:97:d4:f1:2c:f2:54:15:97:
af:8c:05:eb:db:bc:56:c0:5d:87:13:54:f2:71:80:
cf:bb:37:9c:cb:38:cd:38:50:ec:79:42:ca:80:6c:
62:e3:61:c7:e0:ef:ed:aa:30:9b:05:04:ca:8c:2b:
60:17:dd:09:61:07:af:02:c6:11:2c:e0:26:ba:fd:
6c:02:04:46:63:15:41:6f:42:e3:e8:86:e8:d3:bb:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:0E:EC:3D:1D:A1:1D:D5:65:73:9A:92:3F:06:5E:95:9F:9C:33
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:3e:60:cd:a3:a9:bf:98:87:63:a4:65:98:38:53:80:94:
42:1a:c9:ef:83:d0:2b:2e:59:7c:3c:dd:4e:4e:be:f8:d6:96:
ef:f8:cd:c7:6f:c5:21:5d:ae:0a:80:b2:e5:8a:63:e6:94:8f:
22:c9:65:49:0c:e2:54:c6:32:ab:8d:e6:05:c9:52:45:b5:7e:
70:28:5b:65:02:1f:b5:dd:0f:23:95:d1:59:9b:9b:4a:3d:1e:
46:6f:5a:2e:d2:31:99:af:d2:30:b5:ef:af:bd:0d:c4:7f:95:
f6:7a:39:71:e6:d3:9d:e1:4b:86:bd:99:12:5c:ac:f1:f5:3f:
9c:8f:44:35:83:2a:95:d6:f2:d0:9b:2e:45:d2:53:61:d7:93:
b7:57:72:5c:4a:b7:41:f2:83:82:5a:34:01:df:d1:01:a3:bf:
92:4b:a0:47:cb:7a:f6:55:76:29:95:d1:3f:42:41:e4:45:d2:
a7:c5:2f:1d:a8:c7:99:cc:b3:ef:c5:39:33:0e:1c:50:65:bf:
6e:f6:9a:c5:a9:15:81:a2:40:ba:03:15:92:4e:9c:13:b0:3c:
89:af:25:8c:13:58:ea:f2:95:7d:9c:55:af:62:e6:00:38:a8:
65:a6:37:f3:32:7c:6e:43:07:aa:13:98:e7:5e:63:f7:f2:75:
e2:8c:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:41 2026 by rpki-client