Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: f6mneQnj7gaDNr9BecHXZX6GDfMFMlDWP93aO4zo78s=
Subject key identifier: 82:06:01:54:B0:55:58:C9:B7:80:28:23:06:F6:CE:0E:14:EB:72:5E
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019D28BB6C306DDDCEDC8795D272048FB0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 4rtRLqKePFTQ90l7GwboVNTyJm5sR+aEGmw8TU787eg=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6c:30:6d:dd:ce:dc:87:95:d2:72:04:8f:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=82060154b05558c9b780282306f6ce0e14eb725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:ec:13:73:4e:a6:ec:5b:13:a3:57:2f:82:
30:ff:95:b6:f9:48:a6:99:af:96:45:74:df:bb:ec:
e6:29:3a:a2:9a:ba:1d:8b:dc:e0:74:e5:87:08:bf:
0e:67:a3:7b:39:e1:76:34:e2:ce:ae:25:43:3f:b1:
23:c7:0c:42:73:f1:6a:3b:0b:62:52:71:2b:dd:c2:
c1:e8:c2:1c:29:66:fd:57:54:7f:47:a7:ee:85:79:
71:f9:04:d4:50:14:06:5f:50:85:33:71:de:9e:09:
57:9c:20:67:2a:5e:53:fc:cb:b2:bc:a8:83:5f:80:
8b:1a:0f:bf:62:b1:03:96:27:02:54:b0:b3:be:cd:
2f:3b:ed:d0:a9:2a:d2:8f:1a:f0:8d:73:20:7b:a6:
12:75:0a:cb:6b:35:47:44:39:8e:de:7c:ee:a9:07:
11:4e:84:58:39:7a:15:40:46:64:b9:d6:1b:dd:67:
42:92:ff:b1:42:6d:2b:ad:cc:7c:c6:7b:d8:25:75:
49:b6:a9:75:32:87:ae:6a:c5:3a:8b:db:f1:80:b1:
cd:24:0e:51:4b:90:df:19:b2:eb:0a:ca:56:77:e3:
6e:51:c0:c2:3f:a9:03:1e:f0:7d:98:d0:e5:3c:34:
8a:e6:9a:f3:35:3e:a5:ac:e6:da:f5:2a:d5:9c:03:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:01:54:B0:55:58:C9:B7:80:28:23:06:F6:CE:0E:14:EB:72:5E
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:d0:a4:56:80:2f:35:63:07:aa:64:73:f7:57:2e:2e:f3:
ae:8d:ea:d7:55:72:e6:ff:33:2d:58:7a:29:0b:e9:8b:e7:42:
ae:9c:48:27:e1:83:d0:68:57:2b:07:35:18:b8:2e:11:a9:89:
07:93:4d:49:10:18:72:2d:fe:23:51:95:dc:7c:33:ff:59:e6:
9a:d1:57:ca:c9:b2:c0:a6:9b:db:20:e4:53:91:b0:7f:af:eb:
52:31:05:81:f2:5f:8f:f4:18:b4:21:67:34:47:72:43:ba:2c:
67:a7:91:00:14:51:b2:6f:ba:60:d3:2b:c9:25:a5:a5:eb:20:
f6:26:77:55:0f:0f:c4:66:94:cc:81:18:77:0c:03:0f:36:ef:
af:da:07:0c:43:58:99:83:14:8c:86:43:e8:bc:e3:10:1b:04:
28:8b:f0:21:5e:e3:29:4d:25:34:d3:ff:90:11:d1:57:55:63:
37:6b:35:e8:64:53:3d:32:7c:0a:fe:a9:4d:fa:24:a7:a0:30:
1c:62:98:94:b2:79:2c:86:8f:4c:f6:0b:24:27:88:2f:46:2d:
76:8c:86:d5:cb:2b:76:be:be:bd:0f:3b:e6:aa:9f:38:fc:6e:
79:70:e3:0e:1f:9f:c1:e9:1b:e3:f1:8d:71:6a:f1:19:6b:b0:
e5:df:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:44 2026 by rpki-client