Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: jC+6Ckc5rPnAeeIGjjAswiVvaBNOT6heyfBOIbpbuh4=
Subject key identifier: FF:7D:BE:C7:4A:37:C5:0D:38:0C:99:AA:A8:F5:CC:DC:41:D5:41:21
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019D26CD3679A0878C2A5D5BC0D88704AD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: gljxshkpPfAWSGqmMnIRCF+56VUCS9+ZCUjWyojrWu8=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:36:79:a0:87:8c:2a:5d:5b:c0:d8:87:04:ad:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=ff7dbec74a37c50d380c99aaa8f5ccdc41d54121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:d9:2e:b8:a9:91:a1:ef:a4:6a:00:db:d0:
ee:f2:67:b7:c5:e7:7c:19:2d:27:25:e7:4b:39:f7:
c5:e3:7c:df:a0:f5:15:b8:db:39:e3:9c:d0:54:9e:
b9:5d:6c:76:4f:18:6a:90:d1:55:18:f8:39:a8:d2:
25:bb:5d:b2:ae:fd:58:8f:39:2a:94:48:26:23:32:
56:63:8a:d0:ed:60:e9:94:a1:c3:c5:4b:4b:8f:36:
de:ab:15:50:e7:d4:63:c9:4f:cf:92:7f:ae:99:8a:
2c:82:28:c8:b6:8d:c1:eb:4d:88:db:53:53:7c:10:
f5:45:72:e6:f5:4a:e9:eb:d6:45:ac:c6:72:f7:c0:
f2:fb:fe:83:b5:94:68:0d:a1:d3:90:ba:35:79:22:
51:dd:8e:c8:a9:6f:b9:8b:7d:10:78:da:fb:ed:17:
c6:91:bf:59:58:96:e8:cd:64:12:6c:ad:bc:77:59:
4b:ac:94:e9:83:7f:0a:d7:6e:72:0f:7f:ce:11:f7:
93:65:63:d7:22:93:18:b2:f0:30:45:49:f5:8e:77:
60:d6:dc:83:bb:7b:88:73:de:9c:15:b6:56:0a:00:
45:96:bc:6c:49:69:48:ac:93:96:06:ef:e4:1c:e3:
04:7c:71:c7:b7:88:3f:22:cd:c2:7f:1b:dc:6e:4c:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:BE:C7:4A:37:C5:0D:38:0C:99:AA:A8:F5:CC:DC:41:D5:41:21
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2d:7e:f4:57:1c:60:07:98:dc:84:0b:f1:7d:03:28:ac:15:
7e:74:e1:04:95:eb:c8:49:27:ee:bc:34:a3:86:9d:a0:55:43:
7a:ff:75:1a:f8:47:38:c7:af:5f:f1:c3:bf:21:ee:0b:7f:7f:
45:0a:d2:42:cb:3a:23:de:78:95:f5:ee:d9:3a:5f:f7:ce:31:
a9:a2:ed:79:ed:20:d6:08:1c:a2:a7:fd:bf:ca:97:0e:4e:c7:
20:29:1d:9c:ad:2b:03:f8:0c:3f:30:b2:c2:a7:f0:a3:a1:6b:
15:2d:e2:61:f2:10:18:8e:c3:f3:03:4d:b1:15:f7:c7:b5:5a:
c1:09:f5:29:de:29:b3:c5:82:be:87:29:72:b8:97:5f:3d:bc:
e6:8f:83:e1:a5:99:7a:07:a6:f7:66:bc:a7:a7:9f:33:bf:bc:
6a:a2:2f:19:13:48:86:d9:9a:9f:c7:20:54:7b:48:83:b2:77:
a1:cc:fb:64:40:72:b8:81:b4:5e:9d:43:29:2f:06:dd:2f:7e:
6d:5a:7e:ce:27:87:11:03:1a:fd:0a:ba:28:2f:8c:c9:bc:ce:
7b:96:4c:70:99:42:e6:d6:1a:92:4d:33:de:49:fa:e3:e2:c6:
d3:6a:c0:c0:e8:6d:f2:25:68:a3:2c:e5:c2:f9:2b:f3:a5:73:
1a:b3:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:11 2026 by rpki-client