Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: VE2BBpHJGZGrmDsXBWXX+bxRvfPGVKstj33nf8efEis=
Subject key identifier: 6F:38:26:24:73:E3:E5:FE:A2:D6:62:45:B8:B6:A0:13:86:16:5A:93
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019D28F29E5201FC5B5D5D300525F49293E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: vMADMovVnGr9zlcveES425y2LdohQltCzAK9py5iPrM=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9e:52:01:fc:5b:5d:5d:30:05:25:f4:92:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=6f38262473e3e5fea2d66245b8b6a01386165a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:c7:f3:f5:5b:6b:25:70:09:84:1d:1e:4d:
25:65:42:02:fb:48:fb:2a:b7:cb:3b:82:66:21:43:
3e:28:9c:09:17:69:39:30:b7:94:be:8e:dd:ae:93:
1b:ee:4e:6c:75:da:fb:ae:11:1e:8b:55:7c:a5:74:
8c:6c:e0:18:cf:00:43:e0:72:2d:ed:07:f1:2d:48:
b6:02:cf:6c:5d:80:25:ac:a5:7b:28:4a:4e:eb:89:
a0:e1:7e:48:e2:15:f0:1b:02:b5:f7:b3:75:68:98:
94:79:80:ef:26:3c:2c:b1:ef:b6:8d:db:20:a7:d1:
c0:2b:73:42:a7:62:44:06:df:cd:e1:d7:71:db:68:
09:fe:94:3c:ee:71:b7:7b:cb:ee:2d:86:57:b4:d6:
61:36:38:d8:58:46:0d:6d:59:1f:98:db:fb:5f:3d:
0a:c8:81:d9:81:5d:63:09:c6:73:c6:d7:38:ca:6e:
0e:f9:6f:b7:25:85:46:1e:74:26:ed:d0:90:5e:54:
f3:86:44:13:28:19:f3:4c:8a:65:cb:8b:08:cb:61:
ce:28:45:e5:25:f5:eb:7a:65:e4:3a:f6:34:fd:65:
14:0a:25:df:54:4e:6e:a8:74:a4:b4:c6:7d:34:1b:
fd:2e:e3:73:a0:8b:b0:25:44:d8:ce:97:62:85:4a:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:26:24:73:E3:E5:FE:A2:D6:62:45:B8:B6:A0:13:86:16:5A:93
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:58:b6:fc:e8:eb:4b:06:dc:93:ae:3c:34:1a:7c:b7:48:
b6:09:aa:bb:9a:fe:f0:4f:cd:91:45:fd:60:9c:5e:db:1d:78:
a9:d3:8d:25:7e:52:37:81:ba:1c:80:12:07:a9:1c:be:68:71:
96:83:2f:9a:04:f0:22:48:56:e3:b7:9f:f7:af:64:cf:a1:e3:
da:8f:02:62:85:78:8c:62:13:56:bb:2c:72:89:a7:41:99:94:
7e:66:f2:a3:6b:2b:e8:15:a7:4f:42:23:7a:89:07:86:7c:ea:
78:20:b9:61:d8:e1:e6:ec:25:2d:a7:bf:38:76:a6:9d:fa:2f:
c8:91:f6:e3:84:97:82:ef:7d:7d:8b:be:3f:f8:05:25:9c:b8:
83:d0:04:cd:95:d8:47:f1:2f:74:05:4c:b2:e7:1b:fb:7f:05:
07:de:8a:82:3b:a4:55:cf:a9:19:9a:a1:cd:a3:59:0f:30:3f:
f1:b7:e3:e1:58:38:a5:a9:67:68:34:16:ec:ee:58:7a:d5:c0:
39:ee:17:16:2a:b4:5a:e7:0a:fc:56:8a:87:3e:4f:b1:f0:8d:
e1:f6:01:55:c0:88:1f:0a:c2:ff:6a:67:1d:dd:59:ac:07:bf:
8f:c8:ca:b9:7a:35:9a:81:4e:c6:b9:0a:8a:2a:21:27:72:64:
75:12:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:58 2026 by rpki-client