Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: i7VFnEW6BcH8aJOX5ldd8q8srOlGYeazKgfdEqiMids=
Subject key identifier: 0F:D9:FF:55:7E:C4:A9:B9:0D:7E:37:43:B7:B3:42:E0:11:50:AE:D5
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019D296097424E9301327ED1C96D1D000972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:01:29 +0000
Manifest this update: Thu 26 Mar 2026 09:01:29 +0000
Manifest next update: Fri 27 Mar 2026 09:01:29 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: GqjekMvSGY2yX5M09+FDjEWn4rBhAP7C16f47QwkRJo=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:97:42:4e:93:01:32:7e:d1:c9:6d:1d:00:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Mar 26 09:01:29 2026 GMT
Not After : Mar 27 09:01:29 2026 GMT
Subject: CN=0fd9ff557ec4a9b90d7e3743b7b342e01150aed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:3b:0b:19:19:2a:40:1a:8d:97:57:63:74:
03:ce:a5:8a:68:c9:6f:95:85:bd:0b:30:76:ef:19:
51:cb:7f:68:f4:0b:6b:48:98:4e:50:bd:72:1e:71:
15:4b:0f:6e:5e:33:81:88:3e:c8:30:9a:da:6f:4c:
aa:8e:a2:5d:d9:c5:0b:28:b9:70:d0:92:52:eb:91:
e7:eb:33:8d:d5:b6:ed:ee:64:5c:72:11:d0:a3:1e:
48:c7:d0:6f:06:90:d6:36:de:70:c7:85:6c:bf:69:
70:5b:d3:79:63:c1:00:5a:ae:9a:72:c9:77:fc:24:
60:86:a6:fe:07:fc:2a:d1:28:97:b0:0d:22:27:7c:
91:e8:09:18:b7:8d:3e:6b:a3:e6:51:84:98:be:21:
17:93:4f:c9:f7:43:f6:eb:30:c9:a7:69:a2:d5:31:
79:4b:eb:ae:0d:62:ae:ca:2f:8f:95:ed:2f:66:b3:
be:b1:ee:9b:60:fc:dc:87:00:9c:dd:df:6e:2f:e6:
eb:60:a1:21:08:fe:98:be:50:b2:90:59:35:23:8a:
2a:0d:0c:41:3d:1f:52:2f:16:6d:f4:2f:18:1e:ea:
ea:fa:64:f0:47:63:63:be:bb:6e:3e:ea:b7:11:c2:
a9:d9:c4:e5:ba:1a:6e:c8:61:28:c7:31:3f:ed:9e:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:FF:55:7E:C4:A9:B9:0D:7E:37:43:B7:B3:42:E0:11:50:AE:D5
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:11:8e:2e:4c:55:a7:09:ee:5a:f7:6e:8a:90:d9:58:df:67:
dc:35:4b:ec:fe:a5:48:0b:7a:df:fc:ba:a4:93:7f:a8:3b:32:
be:22:a3:e1:e3:f3:0f:03:d2:f3:68:ff:c9:28:f1:26:90:cb:
06:3f:34:d2:e5:e6:cc:a6:43:d7:71:08:45:b3:8e:10:83:b2:
42:39:ef:b6:af:de:2e:b7:cc:f2:df:68:85:78:69:c8:55:68:
6e:36:ad:be:f2:17:17:84:da:52:50:6c:05:83:59:8a:bb:c6:
f9:4e:90:ce:0b:fb:d0:5f:c4:dc:2d:8c:9a:51:f0:fd:06:79:
da:30:25:b6:a5:ca:28:16:ed:5e:a6:e6:e1:7f:af:2a:24:fc:
f3:8f:98:5b:80:16:4b:e0:86:0f:f8:f9:70:12:4d:c6:10:a5:
a8:c3:f5:16:55:a2:8a:d9:38:fd:5a:82:ed:15:15:ba:d5:cc:
b4:7b:bd:65:8d:43:13:1f:b6:ec:84:c1:79:c7:83:b4:c6:ba:
48:5b:b3:15:82:b2:67:0d:26:9c:3a:6f:28:b8:b6:75:3b:2b:
81:97:d2:5a:e5:07:1d:eb:08:b7:87:2d:32:6f:88:55:20:79:
25:b8:6d:fd:d5:48:80:58:82:0b:1b:4f:de:30:8d:77:4f:02:
ef:17:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:15 2026 by rpki-client