Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: o058Ubn/R0oPIGqSpfRKMruULbSDoZCYLFcTnCd1+8A=
Subject key identifier: 18:C5:9E:29:71:59:1F:33:55:FC:4E:5C:1A:2D:AC:16:09:2B:CC:AE
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 019D389C52B691B158961DFD39C39E727445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: VLyY+LC+Xoyps8KKr6+16v0w2nLy/AkI/+ZfLy99ZCc=)
2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:52:b6:91:b1:58:96:1d:fd:39:c3:9e:72:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=18c59e2971591f3355fc4e5c1a2dac16092bccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:5f:66:e2:ae:70:4c:61:f1:1e:f5:bd:06:
0c:c3:5b:29:6d:94:25:79:ae:cc:36:1a:21:19:95:
ee:ab:79:7a:61:bd:a9:7c:b3:ca:c0:fb:27:39:bd:
3b:58:3a:b9:79:8e:15:9d:d5:45:a8:1e:11:26:ea:
1c:3d:ac:12:2b:42:ad:61:4f:ca:f4:c7:25:4e:51:
8c:92:8a:dc:5c:0d:da:9e:cf:33:85:69:6b:34:26:
63:a2:9c:67:d9:36:bb:0c:49:22:3e:ca:41:13:49:
38:4e:83:2d:c1:d5:19:2f:d2:3a:9b:d6:f0:07:84:
54:4b:50:49:ed:2d:15:e6:17:24:28:dc:b0:31:d8:
3e:f5:d1:34:28:cc:2f:42:53:a3:f7:94:e7:23:03:
54:29:4f:5a:ef:7b:e8:ac:82:3b:82:c1:3e:83:ba:
79:eb:da:45:90:52:8e:79:a8:c5:00:86:5f:5b:b4:
9a:9e:73:f6:c2:47:34:98:36:36:49:66:c7:b5:2f:
5e:2c:cc:12:50:4a:e4:a2:ab:62:7f:bb:14:85:59:
81:61:7d:dd:85:d0:f3:62:a6:62:b0:a8:8a:6f:80:
71:ec:35:31:db:69:e5:37:e3:c3:55:59:8a:09:ed:
6c:df:50:fb:b4:21:34:54:cd:45:29:64:30:df:c4:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:9E:29:71:59:1F:33:55:FC:4E:5C:1A:2D:AC:16:09:2B:CC:AE
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:01:52:7d:e1:b5:dc:b2:99:f1:ff:b6:52:49:9f:d5:b9:0d:
a9:2b:bf:c3:5b:52:8a:b3:5e:b6:0f:ff:1b:86:da:47:18:4b:
f4:f1:ee:67:b0:46:56:74:a5:e8:01:bc:10:ea:ee:45:b7:a5:
91:98:9a:b5:ee:7b:02:f7:7d:ea:ed:d9:87:19:35:ec:85:f6:
a3:9f:8d:1e:f7:5a:66:4f:41:67:bc:d1:13:e6:1b:0e:18:87:
55:04:cb:00:4d:16:7e:c7:a3:04:19:0d:7a:eb:02:80:b6:5c:
76:4d:73:2c:66:3e:f0:15:06:c7:e7:26:b7:62:77:96:b0:90:
15:7e:c7:03:13:b7:5b:5c:1e:57:8d:3a:a0:85:1f:d0:73:9c:
3a:18:30:0f:3f:43:e7:c2:44:12:d0:d6:5b:ba:69:f2:30:31:
da:a7:89:cf:8d:b9:00:f7:5e:2e:0b:a7:00:75:62:32:0a:82:
11:42:3f:2d:a2:65:c9:e6:8a:8f:ef:7f:51:e0:31:6c:bb:56:
f2:dd:67:da:e8:a8:b3:c4:e9:64:f3:15:ec:d2:67:a7:bd:e1:
b5:00:09:55:e3:64:d5:48:1b:a8:39:79:5e:98:5e:90:78:9a:
8d:9f:ce:16:e9:5f:96:6d:99:a0:53:e5:2f:de:84:d0:a4:ec:
5c:93:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:54 2026 by rpki-client