Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: bCiYk93cJxvolL9Yka8ERScz++K7jS5jDeaYlanqXiE=
Subject key identifier: 33:A1:D9:62:E3:76:14:D5:A5:9B:D7:12:02:13:16:27:9F:09:01:68
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 019D28F278CDE7DF9C00EA1686769BFE06D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:12 +0000
Manifest this update: Thu 26 Mar 2026 07:01:12 +0000
Manifest next update: Fri 27 Mar 2026 07:01:12 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: cMxeNZXgH2SUdRp00lUdri268CuHWxFOu9pEo84UVN4=)
2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:78:cd:e7:df:9c:00:ea:16:86:76:9b:fe:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Mar 26 07:01:12 2026 GMT
Not After : Mar 27 07:01:12 2026 GMT
Subject: CN=33a1d962e37614d5a59bd712021316279f090168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:ff:2e:65:6a:9b:fa:9e:32:4e:bd:d2:29:
70:80:05:6d:c8:38:2d:0f:3e:35:26:66:a9:e8:86:
80:46:1e:7f:52:ab:4a:0b:36:81:a6:88:39:4a:ad:
8e:8c:2e:41:ae:aa:d0:08:f5:f3:b0:10:74:84:29:
11:16:c2:fb:c2:7f:ae:26:7f:76:db:f0:b3:32:3c:
cb:8c:32:fd:f0:5a:8c:62:3b:d1:59:03:eb:cf:b3:
4b:2d:44:60:78:df:21:d8:68:e9:91:6a:3b:40:65:
3d:af:8d:78:aa:6a:b7:08:14:ce:6e:f8:e5:1d:f5:
a1:b2:87:ad:e2:e7:63:2a:3c:d0:3f:34:e0:43:ba:
41:65:15:10:96:bb:cb:00:b6:d5:ed:e3:e5:75:66:
82:45:ba:b6:94:7c:6f:d4:8b:66:f6:64:9d:a6:2f:
b2:68:aa:01:87:b8:1d:06:c9:a9:20:18:05:0a:80:
ed:59:8b:a9:78:5f:d1:ee:c8:43:ff:9e:a6:5e:5c:
df:53:0a:83:bc:bd:ef:f3:4e:ff:b2:0e:83:3d:e6:
ff:40:a1:bc:d4:69:30:53:eb:e8:af:f9:ea:cb:c5:
26:2d:d4:85:cc:0d:87:5f:01:1c:eb:59:f0:f8:53:
04:05:f4:e4:94:60:23:ef:6a:8f:97:2f:69:c5:9a:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:D9:62:E3:76:14:D5:A5:9B:D7:12:02:13:16:27:9F:09:01:68
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ea:53:29:ae:b5:1f:5f:69:eb:2f:6d:c1:a8:bf:88:23:82:
8e:9c:75:86:36:b1:56:1b:69:e2:cf:9d:35:dc:e9:83:1d:4c:
5d:fe:e6:4a:82:9b:a1:b9:65:04:7f:b1:15:1d:37:46:7f:d9:
07:87:c6:c1:bc:ef:6c:9e:80:3d:12:22:4e:57:22:88:96:02:
35:92:03:f1:9e:39:69:89:62:d3:c8:f4:61:2a:c7:c2:60:33:
af:1a:2b:6f:42:c9:3e:3c:4e:be:70:53:79:e2:d7:58:e0:02:
2f:8a:85:c8:de:2d:df:b3:2d:2e:3c:e6:69:1d:e3:26:b5:0b:
2b:cd:77:c8:1e:dd:9d:ca:4e:0f:2b:1d:ca:e6:ba:88:db:c6:
76:36:13:57:69:cf:4b:41:26:8d:1c:fa:5c:e3:cc:e4:a1:e7:
b8:f7:92:5f:43:5b:94:cb:45:1f:9a:c6:46:52:9a:c1:fd:6d:
3f:0d:d0:a6:82:6f:ff:45:08:44:71:e1:a9:be:87:a2:bd:50:
30:cb:67:d5:cb:86:cc:50:e8:25:41:9e:7c:3d:fe:1b:70:41:
3d:f1:95:39:03:00:b1:84:71:f7:a8:e1:1e:a4:38:f9:15:20:
57:9f:f4:8a:1b:6e:7a:a1:f2:5e:8a:51:31:2b:5e:ab:5b:6e:
e5:c6:7f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8njN59+cAOoWhnab/gbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRkM2FmZDdjY2U3Y2UwMGE5ZWFjNjdlMGJjYTk5YmVi
NzI5YWEwHhcNMjYwMzI2MDcwMTEyWhcNMjYwMzI3MDcwMTEyWjAzMTEwLwYDVQQD
EygzM2ExZDk2MmUzNzYxNGQ1YTU5YmQ3MTIwMjEzMTYyNzlmMDkwMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLj/LmVqm/qeMk690ilwgAVtyDgt
Dz41Jmap6IaARh5/UqtKCzaBpog5Sq2OjC5BrqrQCPXzsBB0hCkRFsL7wn+uJn92
2/CzMjzLjDL98FqMYjvRWQPrz7NLLURgeN8h2GjpkWo7QGU9r414qmq3CBTObvjl
HfWhsoet4udjKjzQPzTgQ7pBZRUQlrvLALbV7ePldWaCRbq2lHxv1Itm9mSdpi+y
aKoBh7gdBsmpIBgFCoDtWYupeF/R7shD/56mXlzfUwqDvL3v807/sg6DPeb/QKG8
1GkwU+vor/nqy8UmLdSFzA2HXwEc61nw+FMEBfTklGAj72qPly9pxZr3lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOh2WLjdhTVpZvXEgITFiefCQFoMB8GA1UdIwQY
MBaAFHRN06/XzOfOAKnqxn4Lypm+tymqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUt
ODkyMWIwNTU5ZTkwLzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUtODkyMWIwNTU5ZTkw
LzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlepTKa61
H19p6y9twai/iCOCjpx1hjaxVhtp4s+dNdzpgx1MXf7mSoKbobllBH+xFR03Rn/Z
B4fGwbzvbJ6APRIiTlciiJYCNZID8Z45aYli08j0YSrHwmAzrxorb0LJPjxOvnBT
eeLXWOACL4qFyN4t37MtLjzmaR3jJrULK813yB7dncpODysdyua6iNvGdjYTV2nP
S0EmjRz6XOPM5KHnuPeSX0NblMtFH5rGRlKawf1tPw3QpoJv/0UIRHHhqb6Hor1Q
MMtn1cuGzFDoJUGefD3+G3BBPfGVOQMAsYRx96jhHqQ4+RUgV5/0ihtueqHyXopR
MSteq1tu5cZ/Jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:34 2026 by rpki-client