Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: m5Zgt68UjyEEwHkT3ADCDE0PbRcWKHkdK6zuxZYYOAo=
Subject key identifier: 41:F0:EB:27:CE:C8:1D:74:E3:1A:24:EE:8F:86:28:99:4C:1D:72:2F
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D28842AD0B27BCF5910CEDA453FD43399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: Q5xkDFQ2NWqPGI+f8nwCPhRsEdLFNFPz6+tWoM6ykGs=)
2: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
3: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
4: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
5: qJJ0wcWXHtXGbw82Hr-JWQr4AsU.roa (hash: GTpJtd9njL4o/WVli2fbOv6n9dmdweWLp2jvbliePk8=)
6: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
7: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
8: yT13HA89M9lex7KTGn39CizxepM.roa (hash: cUKc2MzhQ8fQzkrbpUsocGqB25zuQeATEp9/WG+cVbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2a:d0:b2:7b:cf:59:10:ce:da:45:3f:d4:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=41f0eb27cec81d74e31a24ee8f8628994c1d722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:3e:68:e3:95:da:f4:55:1e:e2:93:24:a1:
d1:09:06:f2:a6:1f:62:31:71:d5:14:5d:88:20:db:
69:c5:b9:8b:85:96:e5:1b:ad:af:99:8e:de:5a:e3:
37:91:06:75:8b:89:43:36:9d:93:17:e8:25:c0:dd:
1c:9c:78:f3:67:d0:01:de:4c:92:0b:05:08:01:6b:
53:fc:38:fb:8d:b4:66:db:dd:d0:9a:6d:f7:dc:dd:
40:bd:19:b9:1a:e5:13:e7:83:f4:65:6e:09:32:a2:
f2:90:12:24:c1:e7:2e:4e:fc:5c:27:a5:44:db:eb:
6d:dd:89:81:86:90:f0:83:ce:29:0c:85:d7:f2:67:
70:7e:6d:a6:ac:32:5b:18:51:82:5d:ac:f4:e9:70:
56:9f:bf:bb:18:cd:25:8a:6b:45:e3:cb:68:03:b8:
94:bf:fb:c5:83:50:43:b9:9c:8d:06:0e:da:57:46:
1d:0d:ad:22:86:a8:9c:8a:6f:54:f3:78:e9:0a:d5:
68:bc:64:00:2b:15:66:5b:7a:69:c9:4e:d2:62:f6:
84:35:88:26:e9:91:08:39:24:a8:ec:b1:36:06:09:
f9:a2:04:6a:c8:7c:5a:ef:17:94:e3:71:88:b9:63:
d4:55:bc:a4:f0:5b:65:6a:87:13:b9:75:6c:4c:bb:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F0:EB:27:CE:C8:1D:74:E3:1A:24:EE:8F:86:28:99:4C:1D:72:2F
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f2:9e:66:90:ee:b6:22:2c:0e:a3:81:99:d2:48:f1:28:ec:
0d:cb:c7:4f:c6:e4:40:90:b0:16:b1:4d:62:b2:f1:6e:af:a0:
73:07:ae:f6:f1:27:c8:71:88:3a:4c:3c:2f:88:48:32:8f:a2:
c8:a5:25:45:7c:b3:24:1a:6e:3d:1d:2e:64:0e:d2:8e:6c:83:
c0:de:ab:6e:07:ab:ce:6e:40:b2:46:e0:9a:02:e0:e4:ca:81:
e9:e3:ef:c2:29:59:16:89:9d:55:4f:22:7f:5a:4b:a7:7e:20:
7a:b0:02:99:9a:13:32:ee:92:21:25:be:ea:23:7a:b1:2d:63:
f2:03:46:de:68:07:44:32:85:d0:72:2f:30:ef:f6:b4:04:33:
3e:c8:6f:d7:60:4e:13:06:76:00:df:40:a7:12:da:f9:94:89:
9f:af:3b:c2:36:20:0c:33:5e:34:45:91:f1:a9:aa:4f:d5:ef:
fd:55:3a:4d:16:c6:be:56:b1:42:4d:63:8e:c0:c5:b3:bd:39:
e4:70:c8:ec:88:03:bb:83:e1:fe:32:bd:ca:d9:60:8f:9b:1f:
ca:72:ab:8a:38:52:a7:bc:d3:24:6f:81:ee:50:2d:10:bd:52:
cf:30:5d:e8:0b:5d:49:72:ae:79:e9:e0:da:c3:7a:3b:a0:03:
24:00:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:28 2026 by rpki-client