Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: tLCWJAlKpUgtGhvbmPwcBaZeE9tGwAZ2tErT0o86wac=
Subject key identifier: BD:79:BB:11:82:18:E8:36:D0:87:00:5C:9C:15:01:EE:AD:11:46:2F
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019D2929A9EEA588CE35E7573F939058768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:29 +0000
Manifest this update: Thu 26 Mar 2026 08:01:29 +0000
Manifest next update: Fri 27 Mar 2026 08:01:29 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: 1zD55mKsV+xyhSqkldxrL54o1Rw1PIdg5zRYxSAMpPk=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a9:ee:a5:88:ce:35:e7:57:3f:93:90:58:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Mar 26 08:01:29 2026 GMT
Not After : Mar 27 08:01:29 2026 GMT
Subject: CN=bd79bb118218e836d087005c9c1501eead11462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:79:08:57:37:8d:c7:1e:8a:9b:2a:47:48:
cd:bd:0f:0a:21:59:6d:d7:9f:ec:bd:e7:c2:ae:1f:
2d:87:69:f3:02:7b:09:89:73:14:f7:cd:4c:be:98:
10:c0:b4:37:89:85:2f:b6:3c:9d:af:dc:2e:55:fc:
a4:11:07:ad:5c:d1:77:c9:73:d9:7c:a0:ca:cb:a3:
69:e5:d1:7d:8b:b8:33:ce:83:dd:f8:c5:a4:79:4d:
09:f1:1d:8a:b0:82:03:77:5a:a4:c3:0c:78:d0:2b:
0e:75:28:08:60:93:c1:1b:e1:0b:27:14:e2:38:7e:
a5:2c:54:5e:25:19:0a:2b:d5:26:0f:f2:27:28:68:
c4:ce:8b:6d:f6:ee:06:14:65:97:91:3f:40:17:0f:
e7:90:15:a6:34:3f:63:41:02:e7:f5:58:30:24:de:
51:0b:dd:43:70:dd:a0:3a:a1:98:bd:b1:46:2e:b4:
89:4b:3e:63:29:14:62:98:49:0b:59:63:79:db:71:
90:b1:80:4f:9a:10:b0:50:64:9b:b1:ad:8d:bd:a6:
9f:4e:8d:09:e3:5a:e6:0a:db:af:d4:f2:f3:ba:6e:
5a:aa:1f:e8:fd:8f:24:18:72:5d:95:98:d3:f8:19:
fd:4b:ee:c1:df:13:77:30:55:6f:77:a7:b9:be:fa:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:BB:11:82:18:E8:36:D0:87:00:5C:9C:15:01:EE:AD:11:46:2F
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:a7:5a:56:6d:5b:1d:a8:8a:e7:f6:7f:64:c8:c3:b0:ab:
43:62:1e:2d:1c:e9:19:d7:73:92:22:8a:e0:db:3e:9c:f9:cb:
4c:34:14:a8:3c:26:28:3f:71:bf:58:8d:d4:12:21:3a:19:18:
9a:b5:cd:8f:dc:a5:13:76:fe:46:11:c4:25:55:ca:ac:ad:84:
f9:4e:ea:94:ca:ea:dd:da:81:32:e9:00:04:22:f7:0e:8f:b5:
92:b6:64:16:90:21:e1:b3:70:1d:55:53:6f:4b:42:06:02:e4:
bf:d0:ba:30:f5:74:99:70:f4:54:8f:f3:be:de:48:9e:d9:71:
1b:bd:82:0f:42:8e:ff:6c:b8:ac:80:0a:46:39:10:ce:62:02:
7f:4a:f0:66:2d:f7:82:9e:d2:38:1e:87:90:dd:8d:be:c3:3c:
3a:7b:c9:75:b9:fc:b3:2e:63:fe:30:11:ea:fa:74:5a:48:3b:
a9:5f:06:e0:e6:f4:b4:f6:09:b9:77:6a:91:79:c6:fc:e7:f0:
8e:b7:c7:b4:5a:0b:e9:7c:45:51:fa:83:5d:9f:b9:1d:2e:1f:
f6:03:81:5b:a1:cf:d7:42:d7:f5:92:45:59:d6:60:17:09:2d:
18:f6:29:b8:77:58:9f:41:aa:77:69:47:65:1e:4b:d9:64:63:
7f:94:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:35 2026 by rpki-client