Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: 2o1ysb6x0IOYX3Kgbqyc+ebAzDEEib2MjJOrId+QDQ4=
Subject key identifier: 44:AE:D3:C5:18:CE:B1:6D:0E:AD:4D:FE:03:FC:E5:A8:E5:87:A8:90
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019D265FBAFECF6DFB7A15BC26795D0B1EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: 4J8aUIcLxk5FfGnq/pz84js/+m8mBAKx3bOgZeRzrnw=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ba:fe:cf:6d:fb:7a:15:bc:26:79:5d:0b:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=44aed3c518ceb16d0ead4dfe03fce5a8e587a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:3e:a0:df:12:86:60:41:83:ff:94:29:75:
fc:10:6f:aa:73:42:9f:fe:1d:84:fa:5d:5b:de:fd:
5b:cc:f6:dc:f3:27:00:b9:ca:79:e3:90:c9:d5:41:
1a:8c:16:ce:04:26:aa:57:fa:8a:2e:f7:02:09:ad:
39:5c:d0:7b:8b:4c:a8:c4:d0:aa:e0:d9:d5:c4:d4:
2d:fd:5c:2d:b5:a5:32:cb:48:79:9f:cc:65:2c:b3:
a0:a3:65:9b:a6:f4:29:7b:af:26:ba:19:09:ba:5d:
e3:01:c5:56:5c:36:75:f2:4a:d6:19:05:2e:4b:c4:
81:d8:8a:bf:ce:09:a0:34:60:91:10:ec:87:c2:5d:
48:58:82:e9:6c:5f:8f:fd:53:d8:7f:96:bd:b0:04:
d5:9f:82:f0:f3:7d:8b:4a:b8:19:03:11:92:ca:32:
1d:8d:26:ba:61:e2:fa:67:22:5a:af:15:6f:da:9b:
2f:b5:1d:c4:cf:32:1a:6a:65:dd:77:f0:5e:a9:3e:
0b:6e:b6:54:08:7f:f8:79:6f:e3:35:44:cd:e2:86:
f2:fe:76:22:61:76:35:3a:16:c7:88:ec:fe:fc:99:
d1:34:76:a1:9a:2d:af:31:4e:c3:e7:6f:94:a6:60:
62:91:61:66:54:d7:3f:70:c7:46:a7:48:85:0d:ab:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:D3:C5:18:CE:B1:6D:0E:AD:4D:FE:03:FC:E5:A8:E5:87:A8:90
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:31:2d:fe:f0:7e:33:91:3b:36:c1:47:44:10:fb:76:a2:cc:
d1:1e:a2:93:e5:b2:0a:0e:e3:f6:30:6c:67:da:b2:60:c5:f0:
f7:22:2f:29:b7:3b:c1:8b:06:db:69:ee:0a:27:7b:4e:e3:ce:
c4:a9:d4:c6:27:53:18:a1:e8:a8:1f:03:51:c7:89:07:38:35:
8e:16:6d:ad:7e:55:44:45:71:0e:50:27:1e:5b:05:c9:72:11:
0f:40:f8:a2:d7:b7:52:6f:c2:41:67:86:ca:df:1b:f1:96:b4:
9d:29:ca:45:f6:ef:95:6d:f3:df:8e:cc:dd:61:9a:b5:84:5c:
d9:6b:55:38:51:a7:fb:ca:f0:73:a7:72:9c:ff:85:f1:1f:34:
dc:aa:cd:62:48:7d:94:40:28:11:f5:dd:84:83:e8:c7:cd:7d:
d0:b6:85:0d:6f:f5:fd:f3:16:f9:33:83:d0:31:ef:25:f4:71:
5f:f5:94:38:18:80:cc:d6:c2:6b:29:9c:f1:09:30:70:f3:c6:
25:a3:f8:b2:70:ca:67:83:85:2b:9d:86:16:b3:d8:b3:3c:a1:
59:38:00:88:6d:0e:3b:c0:f4:f3:24:ec:e8:85:0d:59:8e:79:
fc:5a:83:bb:df:2f:15:14:c0:ee:82:ae:de:fd:52:95:18:b5:
76:ad:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:01 2026 by rpki-client