Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: xd9WLbxpZAKwZbZeuHaNQh6lUGIAOGGiOgVkCdVm3TU=
Subject key identifier: 4D:5E:65:91:0B:BB:A7:E6:CC:B1:38:A2:01:F0:E7:24:CF:00:E7:47
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019D281701E3D88A23AC45A86AE2E31B4A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:29 +0000
Manifest this update: Thu 26 Mar 2026 03:01:29 +0000
Manifest next update: Fri 27 Mar 2026 03:01:29 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: YSUAbAWSmdozX9GJ3nGMM5sjTP1PDHTgA1ieIhfZBIw=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:01:e3:d8:8a:23:ac:45:a8:6a:e2:e3:1b:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Mar 26 03:01:29 2026 GMT
Not After : Mar 27 03:01:29 2026 GMT
Subject: CN=4d5e65910bbba7e6ccb138a201f0e724cf00e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:e3:4b:24:ef:14:4b:c9:38:4c:80:ac:0a:
24:4b:6d:a3:68:f7:76:50:bc:88:d6:c0:c4:15:89:
d3:8f:1d:d2:5a:8a:90:3c:d0:bc:d5:52:be:4e:3a:
64:5b:66:2d:f3:25:45:40:51:bf:19:9c:7b:0f:00:
23:b2:6e:5e:76:a2:32:32:8c:b1:84:fc:c2:2c:ff:
22:62:b8:f4:ec:ce:f3:14:e9:98:92:0f:07:58:67:
8a:9a:4e:2c:d9:71:74:36:10:b2:60:f5:81:fe:ac:
a5:f0:c9:76:f4:41:75:0f:a1:dd:69:6d:e9:d3:d4:
a0:17:bf:70:a7:69:2c:0d:58:1a:85:05:fa:fe:35:
1b:e5:f6:d7:88:e0:4e:53:61:ab:3b:2e:79:4c:75:
80:1a:1e:c7:25:7c:c4:0c:25:f5:9a:a0:c2:d0:e8:
58:5b:d8:06:83:45:88:3a:db:ef:e9:c5:b5:d3:16:
5d:ad:42:b4:fc:d9:3d:27:fc:e9:a4:97:33:95:a4:
ab:02:0e:af:cf:fb:99:52:d7:12:c7:ce:cd:53:3a:
95:03:24:c0:5a:b6:38:78:1b:36:ce:9c:5c:e1:13:
f9:e7:20:55:c4:e8:6e:bb:50:c2:da:16:b7:bd:fa:
71:01:e6:72:9e:9a:f8:87:e4:cd:08:e8:36:7d:e6:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:65:91:0B:BB:A7:E6:CC:B1:38:A2:01:F0:E7:24:CF:00:E7:47
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:68:9d:61:1d:ba:85:e2:7b:ac:35:bc:51:49:02:34:94:c8:
d4:7d:05:1d:cd:11:e1:3c:6f:9d:bc:0d:2f:db:af:8e:13:b7:
a1:73:da:43:c2:6a:19:44:21:52:b1:7d:3b:17:b0:ba:b8:38:
96:24:c0:78:32:9a:3a:51:1d:1b:3c:a8:18:93:0c:3a:a8:a6:
61:e3:3b:70:27:0e:09:95:17:b7:5f:64:ec:c3:dd:da:3c:ae:
61:9b:92:0c:50:65:2b:f1:e9:87:7a:85:b5:c1:d5:2a:58:48:
5a:a6:b5:cb:2b:32:12:10:33:c1:e1:3a:c5:ea:ef:87:20:cb:
3d:ac:53:2d:67:a0:fc:94:b2:32:cf:de:7c:f5:7a:69:e6:4d:
08:8a:9a:a6:3d:74:74:8c:5c:13:c2:1d:1d:f1:5e:34:e7:3e:
6f:21:71:b8:1b:82:35:1a:25:c6:79:8d:fb:74:76:4e:21:ff:
38:c8:d4:e8:bd:b4:a0:cf:32:f7:54:e0:48:93:8d:29:e0:c3:
b9:31:f8:ac:06:ed:b4:c6:4e:17:2f:4f:7c:c2:e3:4a:b5:f1:
28:d7:69:dd:61:16:a1:37:8f:be:8b:b2:11:4f:60:16:ab:8f:
73:06:dc:c5:c3:9c:e8:e4:90:3a:b7:7c:88:d0:79:12:2d:4b:
e2:da:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:33 2026 by rpki-client