Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: 384k6y5lVDq2cxhX1RGvJcRmhZRhTTWbjKGWgMJUk5g=
Subject key identifier: 25:DB:0A:F5:FD:0B:82:7E:4E:2A:AC:E7:83:C4:EF:80:F5:8A:1D:55
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019D2816D7AE043674E7591870C6AD7D5DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: wvXiJ0D1tmpM5U1JpY5l8Fnt/iG7XdgzL0lh/NMj+ok=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d7:ae:04:36:74:e7:59:18:70:c6:ad:7d:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=25db0af5fd0b827e4e2aace783c4ef80f58a1d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:b6:37:8e:c5:0d:bf:06:f3:05:4a:b1:a1:
16:54:5d:1d:84:e3:1e:23:76:57:54:65:df:69:11:
ee:79:f0:68:c5:50:38:c0:a9:16:03:a0:5d:93:34:
48:86:8c:42:b9:d0:d8:56:fb:3f:c7:07:1c:67:f8:
50:52:1a:ce:31:d0:00:33:ce:93:5d:71:e9:24:97:
a5:da:2f:50:6f:de:9a:bc:3b:0f:9b:1c:e1:78:aa:
74:82:ca:98:b7:e7:94:d2:9b:90:08:39:1e:26:88:
b9:5c:e6:3f:cd:c8:28:97:d4:cc:38:f9:ba:92:1e:
63:b1:69:a4:25:4d:c9:59:54:e6:5f:28:95:91:3e:
9b:54:f7:3f:9d:a5:3a:b3:59:ef:c2:77:fb:ba:7e:
3e:e0:8d:2d:d2:23:49:83:fb:38:3c:f3:c7:d8:f8:
14:29:2c:ef:08:2e:82:05:41:bd:cf:fd:3d:70:74:
04:8b:b8:99:5e:a3:c5:d3:ca:80:95:45:2f:63:be:
ce:6b:56:11:52:1b:3b:18:ec:86:ee:4f:f2:48:d4:
24:4d:59:de:f5:3d:59:77:56:82:b6:46:5d:74:ee:
59:f5:d9:9c:91:c5:1c:0a:22:0a:15:60:4f:3a:68:
ff:ef:5e:e3:20:c0:0c:34:31:b1:90:fa:6d:76:4d:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:0A:F5:FD:0B:82:7E:4E:2A:AC:E7:83:C4:EF:80:F5:8A:1D:55
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:f6:5b:8b:3e:8a:30:2a:f5:a1:66:97:b4:a9:77:a4:ec:
ea:09:e7:64:01:41:cd:9a:81:91:9d:d7:ed:5c:b9:c2:b9:47:
9c:37:42:10:fd:5c:dd:fd:ad:e9:20:df:aa:13:99:4e:38:89:
9f:18:4f:df:b9:95:f6:cf:b4:8a:d5:48:09:96:28:05:17:5d:
f8:07:03:d9:e8:ad:e3:76:90:71:f9:64:6a:ae:39:5c:87:82:
b6:ea:c7:d6:fb:8a:b4:1b:a8:8f:d3:15:37:f2:8f:32:b0:aa:
33:32:63:91:d6:cc:04:94:20:5c:51:c5:bf:97:19:4c:b1:b6:
47:a1:3d:90:26:99:fb:5d:f0:8c:aa:c4:b3:f8:70:04:bc:82:
c6:fc:2c:51:f0:87:f0:da:38:14:62:fd:65:86:3f:36:88:fe:
54:f2:6b:b4:f8:45:4b:ee:ee:77:17:79:15:91:b2:da:46:40:
d9:ba:d3:93:9d:12:99:73:33:78:58:0a:76:83:d4:e0:df:39:
6e:58:e3:6b:d3:36:47:df:25:4e:47:03:9b:74:57:6f:9f:a7:
84:ed:77:fb:5b:85:bf:20:5a:d7:79:e1:64:5d:e9:29:9d:df:
86:1d:d9:31:9b:a7:f0:32:8c:52:94:cb:61:3e:b0:05:09:5a:
b3:d7:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:09 2026 by rpki-client