
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: gZimAukghwXWWwc9uvSm2L/8zxAwK82pB0GCGVn7fZU=
Subject key identifier: AD:40:1B:79:6C:86:DF:E2:C0:81:3C:4C:DB:FE:74:1F:FA:10:98:BB
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019E1DC74133D616BEB472EDDF14C27FDFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 20:00:58 +0000
Manifest this update: Tue 12 May 2026 20:00:58 +0000
Manifest next update: Wed 13 May 2026 20:00:58 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 2xe2F4bkiXdF1gtBk2tmFNbrPo5oLyvOLFwqGqh1Eeg=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:41:33:d6:16:be:b4:72:ed:df:14:c2:7f:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: May 12 20:00:58 2026 GMT
Not After : May 13 20:00:58 2026 GMT
Subject: CN=ad401b796c86dfe2c0813c4cdbfe741ffa1098bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:95:92:a5:3b:c3:60:57:9a:15:3a:4c:2f:
7a:9e:c8:a8:cc:54:ec:bd:4a:bd:47:6c:c5:aa:08:
55:2c:82:4a:a5:74:e6:da:83:62:2f:f8:da:5c:25:
59:55:22:10:d3:ac:91:54:1e:a6:b2:4a:04:90:43:
4c:c8:5b:7b:af:36:02:1f:c7:1b:d7:6b:73:4a:4d:
77:71:78:be:78:78:60:57:f5:85:0b:e0:38:d0:0a:
a0:58:80:e7:4b:83:df:bb:a5:48:b8:b2:ce:ee:95:
ca:72:d2:11:38:24:f3:09:a7:28:22:33:77:5f:7f:
5a:18:b7:f8:f4:34:cd:6c:c8:15:7e:88:5e:d5:7d:
fb:48:25:ff:30:59:4a:a8:5a:b1:fd:81:f7:c9:bd:
6a:d4:8f:c4:7e:0c:ad:78:9e:f0:c9:44:ff:11:5f:
39:31:45:f8:75:a6:81:ed:95:a3:79:ad:e3:05:47:
17:48:4c:b6:d2:38:a6:48:92:74:dd:e2:be:54:c0:
f3:60:91:8b:9f:85:2b:06:86:53:d7:ea:31:d2:64:
64:53:7a:3b:41:f3:1d:81:90:88:81:d9:a0:59:35:
12:d7:8f:d6:4d:73:b5:6d:3f:d1:aa:7e:11:55:48:
b2:1a:d7:0c:3b:a4:83:b7:8e:6a:29:ca:de:4f:0a:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:1B:79:6C:86:DF:E2:C0:81:3C:4C:DB:FE:74:1F:FA:10:98:BB
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c6:24:9e:bb:90:40:d5:1d:05:4e:af:bb:d3:ca:fe:98:79:
d9:b4:d0:67:94:0d:28:9c:56:ed:ce:15:92:b6:d0:8c:52:20:
a1:85:58:e8:98:ce:da:21:50:7f:5d:76:1b:6c:dd:ae:3c:0b:
b9:5d:63:0d:07:27:d8:1b:18:14:35:37:f7:77:35:39:03:72:
17:eb:db:3e:c2:f6:25:18:f4:8b:ac:43:e0:a4:7c:a2:57:80:
01:21:cc:a6:45:79:db:a4:79:4d:8e:ee:0d:79:4e:8e:b5:72:
79:5d:29:ed:c4:cf:15:d7:f1:44:83:33:23:74:c3:00:67:24:
47:ab:a3:f0:d2:07:cc:77:f0:6c:3a:74:a6:b0:43:76:27:e2:
f9:71:b4:b4:21:b3:2a:6b:d1:80:d8:49:66:fe:66:e4:c8:73:
3e:8b:57:b6:47:38:46:f0:c9:ab:11:7c:be:8c:7b:d2:3a:6f:
cc:ca:e8:8e:ff:5e:8f:88:f5:94:6a:67:38:36:bd:e3:dd:09:
ed:4b:ce:1a:cf:6c:9d:55:c6:2c:5f:4d:1f:a5:05:a8:1a:6c:
29:51:96:d2:3f:b6:9c:59:55:79:c2:e7:b0:63:2a:ff:33:4c:
db:ff:70:c0:d3:be:27:bb:53:2d:58:bb:d2:f9:3d:2d:e3:12:
1e:36:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:32 2026 by rpki-client