Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: mczoStYRFMZx5+2UZSiDsJw6hNu1ubM9pEc32tCDn/g=
Subject key identifier: 0D:06:AC:A6:BA:15:19:A0:B1:4F:74:12:E9:BA:CF:7A:33:E0:E3:5B
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019D273ABD91C2893DC78405441C246B830B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: 0YZtTmmCK8uDJ_NrkfevzGMNNso.roa (hash: 6Ainezg6BcOqKKKEtPKxa2vRRGnNyqWUZ83d7KhIAYw=)
2: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: fcvrc+aDqWRH6kRtrrwV5iWfpR6VR5JnrIeYEP7u9Wk=)
3: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bd:91:c2:89:3d:c7:84:05:44:1c:24:6b:83:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=0d06aca6ba1519a0b14f7412e9bacf7a33e0e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:0e:02:6a:7d:f7:58:d9:ab:08:be:a4:95:
ca:c1:aa:46:f9:e1:70:84:f8:f9:b1:3c:55:a0:2c:
40:f9:ff:fe:4b:a3:01:3f:07:da:f9:f8:c9:17:1f:
6a:7a:a6:39:ff:5e:45:d5:bf:51:54:d5:23:76:0d:
ce:f8:84:3c:49:81:56:79:15:2a:09:9b:96:77:59:
58:f0:ad:dd:df:d6:e7:81:54:65:e8:72:32:ee:3f:
d9:69:89:a3:07:a4:29:81:25:06:6c:60:c8:7d:a6:
d6:12:24:80:44:d0:f0:b8:5c:96:48:aa:bf:26:dc:
0d:e4:09:d8:89:90:d2:9c:d1:f7:77:70:21:25:a9:
4d:77:0d:3d:01:fd:86:a2:ac:68:e8:e4:29:be:46:
f0:5b:5f:5d:fd:15:39:e5:c4:83:dc:88:b9:20:9d:
50:5c:30:b4:bd:66:0b:71:62:bc:17:02:ec:12:f7:
23:70:b2:e8:4e:d0:6c:b0:ad:5b:46:be:8d:76:45:
b5:68:11:87:75:15:9a:f9:d3:13:43:9b:c8:a8:93:
7b:73:5b:04:0d:e5:3d:2d:da:a1:ba:20:49:78:02:
79:a6:96:b5:f5:1f:53:f2:d5:54:94:ec:7d:65:6f:
4f:5d:6c:bb:5a:87:da:f8:b3:90:8b:ce:cb:9a:33:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:AC:A6:BA:15:19:A0:B1:4F:74:12:E9:BA:CF:7A:33:E0:E3:5B
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:37:7b:bb:64:3d:83:73:86:2e:72:85:eb:b8:b0:8c:32:96:
58:10:44:d7:71:4a:65:9a:7f:f9:54:07:cc:a2:d1:30:4f:28:
6a:72:92:6a:e3:2c:26:04:86:87:36:e6:b8:22:83:4e:54:26:
ea:7a:03:d2:9e:ed:26:e6:50:8f:b5:b6:6a:11:20:56:69:da:
9b:36:37:64:fe:e4:23:95:f2:42:99:c7:5a:84:68:91:fe:72:
5a:26:39:7b:b9:1c:06:1d:31:52:61:5f:02:bf:35:ec:01:d8:
72:80:ea:b8:8d:54:20:5d:dc:23:d7:8b:a9:f7:ed:18:a9:ce:
29:50:94:25:58:76:4e:d2:74:80:98:f3:9b:ca:a9:aa:90:8f:
f3:10:f7:1e:1e:37:e4:ee:d9:9b:c5:2d:63:2e:2d:85:34:a3:
a6:b5:50:e8:f1:8e:6a:c8:25:4f:64:89:e2:3a:79:a0:51:f7:
44:06:e2:86:ab:2e:fe:7a:52:f0:56:44:a1:26:d9:e0:5c:68:
c6:b6:21:b8:cd:f3:b4:d6:00:8e:14:5e:0e:03:85:e5:fe:5a:
d5:5f:e9:2b:55:a8:10:84:60:97:97:be:39:2e:dd:44:ef:21:
76:d8:cc:49:d5:62:e5:0d:01:a2:41:f5:25:3d:c2:37:6f:98:
cf:f8:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:39 2026 by rpki-client