Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: 9XrZB6sl8Dj+EzvI6TkjvsWHmg22IUXM0hPeOZNB2/M=
Subject key identifier: 5F:CD:D4:C5:52:98:B0:51:DB:B1:31:AE:32:B4:BE:9F:FD:3D:DF:05
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019D25BA6DA5B20F0AAEDA903588DB1A08D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:07 +0000
Manifest this update: Wed 25 Mar 2026 16:01:07 +0000
Manifest next update: Thu 26 Mar 2026 16:01:07 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: uTU2RU7shMMOnaoEp9PjvEkayOk22JhzIb9lWR7FQ+g=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6d:a5:b2:0f:0a:ae:da:90:35:88:db:1a:08:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Mar 25 16:01:07 2026 GMT
Not After : Mar 26 16:01:07 2026 GMT
Subject: CN=5fcdd4c55298b051dbb131ae32b4be9ffd3ddf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:4f:7a:b2:d6:15:7c:9b:fd:50:cb:3e:22:
f9:5f:36:7a:20:50:44:e1:12:a2:e9:38:cd:71:74:
37:f8:d3:83:33:fe:b6:10:8b:b8:47:a0:59:ce:96:
ca:a3:0b:7c:d6:e9:e9:de:3b:97:bc:45:28:da:07:
56:27:01:4a:47:be:ff:8d:3e:bb:d0:19:92:e0:1b:
a0:c2:1a:dc:4b:cf:33:d5:f9:b0:48:6d:71:e8:01:
65:05:1d:9d:b0:33:81:f0:d7:a6:63:c4:a3:2a:11:
c4:b4:1b:dc:c6:4c:a6:eb:19:b8:e1:97:3b:05:e2:
2e:09:19:89:67:d0:dc:20:3f:d5:b7:4c:1e:62:28:
e9:b4:1f:06:2e:b5:53:ca:b8:b0:74:b1:a9:0d:d3:
9c:73:39:3a:77:e7:a6:5d:87:69:5a:d6:da:b9:d8:
5b:51:d2:30:8d:74:84:25:44:45:31:73:a5:ad:56:
e2:ef:5c:13:23:d2:d5:25:c1:74:e1:7a:ae:b1:9f:
01:0c:31:da:07:fb:f7:df:ad:2c:b8:74:1f:8d:44:
2f:63:88:ab:fd:95:cd:5a:27:ef:e9:95:0c:3b:59:
d8:31:87:ac:12:92:b4:3b:2e:b7:e3:83:88:d8:c7:
ec:4b:71:fa:42:7b:f0:5a:91:92:e1:92:7d:56:53:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:D4:C5:52:98:B0:51:DB:B1:31:AE:32:B4:BE:9F:FD:3D:DF:05
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:dc:c2:7f:46:e6:85:ae:4c:04:64:d3:52:26:dc:64:36:69:
dc:13:f0:f8:de:10:18:12:06:6c:d3:d7:7b:19:49:1b:9a:9c:
b5:aa:cf:0b:e2:6a:c7:ab:c6:60:10:ac:5d:18:01:a0:87:fd:
44:09:6c:4b:74:ac:fd:4a:ef:8b:75:1e:9b:38:84:4a:6e:4b:
b9:e1:c6:48:8b:40:c6:b1:0a:bd:ef:be:bf:35:f5:fb:35:ed:
1c:1b:dd:0d:89:54:26:47:25:05:28:94:da:02:e4:2b:54:5c:
0b:08:2d:52:46:3e:37:fb:ea:33:5a:b4:47:9e:80:88:fb:4b:
e5:18:98:e7:e4:3e:51:b1:29:36:98:30:cc:68:d8:05:63:f4:
a3:ba:45:ba:ca:ce:c5:5d:49:2c:0e:b2:d7:98:42:8e:da:6f:
63:9b:d8:99:cb:cd:04:34:8e:ca:00:17:88:d4:6a:bb:77:bb:
dc:9a:2a:69:3d:72:c9:56:24:27:cf:c3:0c:8b:8d:33:1c:55:
22:e8:c6:a2:67:fd:bf:97:79:1d:95:75:3e:31:5e:c8:30:3c:
6e:a5:ea:b2:4a:ce:38:ab:fe:ce:44:c5:cc:2f:fe:c0:53:64:
6f:6a:6c:98:06:63:79:e9:29:6b:81:1e:58:b1:67:e1:af:37:
52:c0:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:36 2026 by rpki-client