Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json)
Hash identifier: pPccUoF7MnOiCXbOf3Bk+XKQCyODqQr+RxTHPQ0vaDg=
Subject key identifier: 05:BB:53:64:00:B2:AC:E0:13:B5:42:5E:CD:5B:68:6B:47:C2:D3:43
Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b
Certificate serial: 019D262834C3141781679AC57F4CA1ED7CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
Manifest number: 0819
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: mN9sBIEaB3TjAYHbBhIwqBqzVUHslx4OjEHfe5QBVAo=)
2: hBUefaIMV4VxrEK-fm1hTMzaWD8.roa (hash: ULTyVqCoLmJTp6EzOZiZ2uvQqGHDruUXv80DgFEK1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:34:c3:14:17:81:67:9a:c5:7f:4c:a1:ed:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=05bb536400b2ace013b5425ecd5b686b47c2d343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:07:12:6d:19:63:94:0b:4c:10:18:43:d0:
6d:eb:8a:03:dd:37:0d:86:61:c5:f1:8b:46:4a:34:
d5:ad:f9:25:7a:88:51:f4:c1:d2:da:bb:1d:de:0c:
10:2d:f7:5d:3c:48:c0:d6:c8:4c:80:6e:a2:c6:a7:
94:ea:37:2f:b5:ea:b6:2e:e6:38:0b:f5:1d:e2:1b:
22:4c:c4:2f:90:04:f3:77:6f:8e:02:f0:84:3e:a6:
91:96:0c:ca:af:bf:dc:ac:c2:04:39:90:19:e8:01:
4d:18:3e:56:a5:fb:87:42:09:4e:bb:8b:4d:8e:37:
c8:e7:33:4b:67:2f:33:5d:f3:d0:ad:2f:11:0e:5b:
e7:dc:11:fa:fc:94:5a:4c:32:cf:e2:77:43:96:1b:
30:02:76:7e:fa:a7:95:46:2e:c8:14:da:f2:ab:90:
4e:52:c5:4b:60:a9:f6:88:cb:44:e9:cd:ed:d7:38:
a4:f9:e2:b6:1d:55:57:b4:5f:c3:04:8e:25:db:b8:
b7:38:b9:b3:d0:13:c3:92:82:6f:4e:42:3d:f0:85:
72:a9:f1:86:33:87:e4:17:ad:9e:35:19:e3:0d:b9:
a3:bd:08:73:b0:ba:0a:c2:ca:43:c5:e8:52:c4:29:
dc:d9:21:a1:b1:dc:69:10:5b:22:a6:f6:7c:a3:0b:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:53:64:00:B2:AC:E0:13:B5:42:5E:CD:5B:68:6B:47:C2:D3:43
X509v3 Authority Key Identifier:
keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a4:62:c2:5c:79:ec:5c:23:9d:e5:da:39:bd:c6:b8:72:57:
df:da:8b:82:09:a2:e9:6d:81:53:75:40:3d:42:83:08:79:d5:
d7:04:8f:6c:2a:a9:1c:37:b4:46:06:bd:18:5f:ef:cb:72:3d:
d0:1c:4a:bc:d3:c4:51:14:41:81:f6:2f:03:ba:48:14:1f:d9:
ad:4f:db:3f:f2:ce:fd:b3:5a:1e:00:21:e3:3b:c3:60:fd:5c:
3a:5f:47:d2:85:c5:e1:64:0d:28:67:f9:a8:5d:7c:b9:73:e8:
e9:e4:0c:0a:98:97:b5:a5:15:4d:d6:2e:f9:f0:0e:f1:be:58:
e8:35:4c:8b:84:86:28:dc:7b:de:86:da:06:12:0c:42:15:15:
91:88:9d:7f:5b:57:ae:9b:47:cc:10:7f:dc:1a:93:2d:5e:5f:
06:f0:ba:2e:79:a0:62:04:79:a3:80:74:4e:5b:0e:51:ee:14:
e1:e5:d5:07:27:c0:d9:34:1b:e1:dd:85:9f:80:3d:c7:11:5c:
ae:68:7a:2c:e1:1b:43:fe:38:e5:85:04:96:7a:1c:d0:9d:03:
9b:c0:d5:dd:75:75:3f:aa:d8:9e:95:87:41:79:32:30:3a:d3:
12:6c:74:c9:da:4c:d4:ef:51:a6:ca:3b:a7:a8:b2:2f:2b:50:
81:6f:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:51 2026 by rpki-client