Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: Ems0R8X0fO/ZtBulNVO5vYT0t+eKJzPZO82ZsTfbEuk=
Subject key identifier: C7:43:3B:57:5A:ED:70:E1:22:45:07:6B:FA:E0:B2:F6:DB:1F:69:4B
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019D27DF8956EDCE67D1CB28BEFA7D1FB1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:54 +0000
Manifest this update: Thu 26 Mar 2026 02:00:54 +0000
Manifest next update: Fri 27 Mar 2026 02:00:54 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: oWZBv8qRzjM3CKJLSXyRDbi0SfcqZiVxULhqwEMCSxc=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:89:56:ed:ce:67:d1:cb:28:be:fa:7d:1f:b1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Mar 26 02:00:54 2026 GMT
Not After : Mar 27 02:00:54 2026 GMT
Subject: CN=c7433b575aed70e12245076bfae0b2f6db1f694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:fc:15:16:f1:ce:3f:8a:59:12:ef:a2:60:
12:38:d3:ac:72:4c:d2:e5:b7:b9:19:e9:3e:86:42:
cd:46:65:e8:a9:92:fc:fb:fd:ba:48:87:84:cf:d6:
29:97:a1:96:ff:de:fe:ee:4a:19:3e:ff:85:60:38:
35:0e:3b:38:0f:f2:b4:0d:6f:36:95:5a:24:38:f4:
98:3e:bb:e8:c7:de:10:f8:0a:02:c6:a7:4b:ff:03:
41:99:be:a5:ed:9c:7a:62:83:34:52:7e:ce:76:de:
50:e9:de:35:5a:ad:19:bd:50:1c:a4:ee:d6:96:42:
85:9d:e1:f0:6d:ed:d6:49:0a:2c:92:10:f5:d5:a4:
25:d6:bf:f0:5f:00:f0:43:13:b0:79:0a:ce:cc:f4:
20:aa:ff:31:c7:dc:42:34:83:45:10:bf:54:b8:9c:
02:83:e8:5a:cf:7b:c6:c4:21:73:b4:61:f2:d7:ed:
6b:dc:0d:df:c2:6e:66:bb:ed:03:c1:32:93:9f:99:
cb:29:84:c3:c2:37:e9:f4:f9:6a:69:88:60:a2:b9:
8f:41:f1:f3:64:b9:7a:dd:97:72:4c:93:16:67:92:
a7:54:94:b8:2d:42:60:27:c9:5b:96:6d:77:3d:99:
eb:e6:3c:d6:fa:00:7e:71:a5:b2:69:1f:29:ac:58:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:3B:57:5A:ED:70:E1:22:45:07:6B:FA:E0:B2:F6:DB:1F:69:4B
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:77:15:45:58:45:94:f9:ec:b8:b2:7d:c6:ba:95:29:e5:
9f:7e:21:3c:1f:be:e2:32:00:2a:79:63:c7:93:06:33:b4:17:
57:13:8a:22:17:79:2a:66:a7:b0:ee:f1:30:92:8a:c3:53:90:
45:3c:ab:d9:97:30:16:93:93:f0:a4:96:b5:09:69:2c:ae:60:
e0:a2:4c:d1:b3:36:c6:76:46:c1:cf:61:be:af:ba:3b:08:ce:
3b:c1:bb:b7:2e:39:2f:78:d4:76:22:a5:ef:64:74:c9:67:16:
d3:ea:b0:59:bf:7e:c5:c0:51:6c:d1:09:e5:0c:73:aa:e0:b2:
09:a8:2b:5c:89:bf:f3:8c:27:de:4c:da:26:56:4f:e7:ec:c7:
89:10:b0:37:ff:45:31:71:c4:58:45:63:b2:6d:ab:59:9e:65:
f5:0e:41:2f:8a:70:a1:c2:f9:cc:8e:e5:77:46:94:a0:cd:4a:
b8:28:ac:77:b6:81:8d:fb:da:88:5d:1d:04:2f:5a:ab:9b:46:
8c:c6:cd:64:c4:b8:f9:c8:26:c8:97:10:02:17:b6:12:40:e1:
02:ac:3d:c3:98:ab:68:5a:d6:14:b0:e1:1c:3c:35:c3:f4:21:
0b:de:94:5a:5b:8f:e8:7e:05:c1:58:a6:6d:74:bd:a9:f8:e5:
aa:80:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:41 2026 by rpki-client