Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: hfFSKtGoUv0BCgp7tJvSLNjMPF+SpIALN304n4OtHyY=
Subject key identifier: C5:B9:7D:61:7B:AD:D6:39:9A:F2:65:28:69:55:3D:08:46:F6:CB:1E
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019D27A8BC791EC926DDAD92F3052548A66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:02 +0000
Manifest this update: Thu 26 Mar 2026 01:01:02 +0000
Manifest next update: Fri 27 Mar 2026 01:01:02 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: GnLlfMcQ1lggeeNcqjoa9fuaPc+qMttKe7psiKy6new=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bc:79:1e:c9:26:dd:ad:92:f3:05:25:48:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Mar 26 01:01:02 2026 GMT
Not After : Mar 27 01:01:02 2026 GMT
Subject: CN=c5b97d617badd6399af2652869553d0846f6cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:7a:89:4a:1c:18:c9:2b:1b:c9:fa:d4:35:
d9:64:78:45:18:d1:96:05:23:a9:b7:07:1a:ec:42:
67:7e:cf:cf:17:f0:db:a9:53:79:6a:8e:cd:53:b2:
99:85:81:33:9b:e8:86:ea:b9:ec:07:c9:09:d4:5e:
94:e7:8b:27:a9:5d:4c:52:1e:f3:66:bc:49:ce:97:
32:b7:ec:78:bb:7b:c8:46:0b:42:a1:7c:55:f3:03:
cd:25:56:f5:ed:02:cc:38:bb:6b:90:a0:e9:e8:a2:
1d:88:41:bd:cb:3a:84:2d:8c:dc:ca:c5:f9:97:b3:
2f:47:18:24:da:e2:ea:ca:d2:50:2d:32:b0:ba:48:
25:e8:f7:bd:c1:db:ac:f2:b9:ef:c6:12:1b:a7:27:
0d:1f:58:76:d5:96:3c:f9:74:4f:7a:d5:e8:43:50:
0a:48:fe:d0:75:14:31:ba:74:c9:6e:dc:3c:ad:d6:
ee:9e:be:1e:96:98:49:e2:ba:66:8f:0f:34:40:8c:
07:4b:6b:51:68:b1:0f:98:1c:5a:ab:a4:4d:c6:dc:
77:e2:f2:07:91:d6:80:94:49:b3:88:3f:f6:0b:05:
34:6f:5f:3e:57:84:27:83:38:16:03:03:6f:ad:07:
4e:9f:4e:9f:f4:31:e6:f3:55:00:59:fc:c8:4b:25:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:7D:61:7B:AD:D6:39:9A:F2:65:28:69:55:3D:08:46:F6:CB:1E
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:82:46:44:6b:bb:f6:22:3c:14:e9:69:88:43:08:f3:0b:07:
12:7d:0d:c5:fc:3b:48:d0:41:fa:0a:b1:0d:57:71:f5:83:38:
0e:16:82:40:79:71:7e:cf:e3:17:cb:5d:fe:4b:dc:a4:e2:2a:
b1:01:33:67:d1:ce:ec:ba:fc:7b:1f:7c:6a:87:dc:29:7f:1c:
57:69:59:bb:c1:44:0e:5e:32:55:b7:a4:19:3e:d8:e4:69:28:
b1:28:a6:00:76:5d:8f:0f:eb:de:ab:88:65:e6:1f:f9:64:c7:
dd:f6:30:cd:4b:f9:ae:1c:2b:2f:41:7a:75:d3:24:76:02:37:
86:66:57:f5:33:f3:33:ad:9a:96:8e:6c:a4:a7:a5:c2:ec:5a:
74:4b:2c:eb:cb:bc:fe:8d:56:d9:1b:6b:25:06:5e:c0:35:d0:
01:77:04:40:87:5b:9c:44:e8:30:55:8e:b8:df:df:b2:00:37:
8c:dd:c3:62:d6:1a:0e:56:c7:be:11:31:c8:60:d1:34:e7:d1:
90:ab:dc:07:2f:e4:fc:38:5a:24:68:67:ac:4a:7f:3a:b0:76:
cc:21:ca:68:4a:77:ac:5c:21:24:a9:f2:2b:49:a0:59:da:c6:
d2:42:c9:fe:01:7f:51:88:2a:51:d3:18:2c:2e:85:fa:f3:fd:
74:77:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:32 2026 by rpki-client