Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: HYzccPRCCkvpy22OjnvtYe1HQ06YDym1emHlSv5211k=
Subject key identifier: A3:7E:0F:15:89:B7:67:8F:E2:8E:31:10:43:4B:E5:C1:48:90:9F:F4
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019D26CD006C9EA4803C955A9444B86191E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: VNfQP/XbH3fcJcTYbyxuHyqzn3EHfbuXbwlk1UjPhdY=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:00:6c:9e:a4:80:3c:95:5a:94:44:b8:61:91:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=a37e0f1589b7678fe28e3110434be5c148909ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:64:28:95:e3:8c:44:cb:af:14:ab:b4:ef:
3c:93:fa:65:4e:8d:fa:2e:a1:0b:75:f3:a9:b2:6e:
08:c1:f0:df:4e:ec:c0:b2:d7:5f:d0:a6:55:84:15:
db:64:33:f4:bd:b1:58:6a:e2:aa:12:c9:e7:89:51:
b4:db:ea:1e:17:49:08:0b:f4:c4:38:9b:4f:07:78:
97:89:0d:bb:66:58:3a:b9:aa:1d:d9:5a:1c:0e:fc:
d2:6e:1f:45:64:b1:a8:d7:5f:e1:22:94:8d:f3:fb:
46:59:d4:d3:69:22:34:9a:c2:19:ee:81:f3:1a:da:
43:b5:66:31:7d:60:63:fe:b9:03:ae:66:01:6f:2a:
65:c7:bf:db:ff:56:68:6f:98:19:d2:55:00:85:d0:
10:00:10:2e:e7:c4:92:90:86:0e:52:5b:a7:94:ce:
4c:af:ff:5c:26:82:55:80:db:8a:18:61:8a:dd:56:
ba:bd:24:76:a4:5c:d4:37:b7:f8:fc:26:75:ef:a2:
44:e8:1e:64:cd:1d:49:57:97:d3:f5:4f:fe:87:25:
35:66:2e:e3:c0:92:41:7f:21:6a:31:b5:ef:75:a7:
fb:b4:3a:a0:2d:c1:2b:68:01:ed:cb:d2:78:c2:1e:
24:d4:2b:28:b1:b3:06:b3:cc:fb:04:e6:1c:9e:16:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:0F:15:89:B7:67:8F:E2:8E:31:10:43:4B:E5:C1:48:90:9F:F4
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:48:2b:8e:f4:32:ed:62:49:fa:6a:d9:72:c8:b0:1f:70:5d:
d6:fd:3c:ab:fb:fc:25:f3:b5:1f:ee:5f:a7:72:4d:ea:c7:23:
87:2a:fc:20:34:b6:94:4c:01:fa:d5:22:57:6a:40:45:95:48:
2e:9c:f7:ad:f8:df:55:22:c2:42:50:b0:8b:35:f4:64:a9:cf:
ff:0c:be:d3:fc:27:a8:76:d7:a3:bb:ea:7c:40:49:0c:49:02:
05:dd:ae:38:98:3f:2e:2e:9c:28:32:60:f4:2a:28:27:1b:72:
02:aa:e6:19:59:f4:c3:37:be:fb:4a:a2:e4:5b:12:30:27:e3:
ec:6e:52:11:0a:20:72:9c:8c:f4:ce:c9:bb:44:19:93:86:eb:
5a:ae:43:76:f2:54:77:da:27:13:b1:ea:9e:dd:c6:b8:ec:c4:
73:a4:d8:9a:c1:dd:7d:60:df:2a:34:f1:4d:5d:01:66:9d:54:
b7:6b:5f:d3:f5:7d:d8:69:99:11:f0:7a:eb:fe:9a:cd:db:38:
98:78:f7:78:7d:3e:5c:e1:f4:26:dc:98:1e:d2:14:d6:dc:3a:
6a:a4:d6:ba:0f:35:2f:21:9e:ec:d0:05:2b:e2:d5:47:09:d1:
c9:0f:8c:d4:f9:e7:c1:69:f8:f1:21:5f:37:1b:4d:26:a4:6e:
01:4e:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:38 2026 by rpki-client