Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier: ygtGxILjdwOpQu68xHRBzEkixDykAfEjsEu1rmXSUF8=
Subject key identifier: 3E:76:95:4F:98:A7:36:34:1D:0D:F1:0C:6B:17:5C:F1:BD:F2:9C:C3
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 019D29975647C073F096ECEACF8E52726B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 10:01:16 +0000
Manifest this update: Thu 26 Mar 2026 10:01:16 +0000
Manifest next update: Fri 27 Mar 2026 10:01:16 +0000
Files and hashes: 1: GJv2c95zewqGYYNIQJziJZtnsNM.roa (hash: Mp+zg2LDO9MydwbN7xl835TAh4mfHcni/EzAt55706E=)
2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: 3afTB5uiaXzLUnioLobNsTeYGElqkbwKeXOCJSbQu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:56:47:c0:73:f0:96:ec:ea:cf:8e:52:72:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Mar 26 10:01:16 2026 GMT
Not After : Mar 27 10:01:16 2026 GMT
Subject: CN=3e76954f98a736341d0df10c6b175cf1bdf29cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:1b:a3:a2:d5:c7:ff:46:fa:39:75:49:ca:
16:5c:1a:94:a6:56:e0:f6:7a:84:10:ad:87:94:06:
bf:38:0b:dd:81:7b:d8:17:16:51:13:5e:86:3e:fb:
c1:d8:4e:22:8f:a5:c5:ac:47:41:2d:b3:4e:18:e8:
e8:1e:91:3f:a6:2c:62:5a:fc:2e:62:4e:f4:a8:7a:
eb:37:dc:48:3c:c0:1c:6e:db:60:dc:61:c5:49:29:
7c:3a:8d:19:a2:fe:fb:70:45:70:45:6d:41:d5:bf:
2b:73:bb:50:e7:ae:7d:04:68:5c:2c:a7:76:c5:89:
15:cf:44:57:58:00:4e:aa:7f:00:d2:c2:9e:fe:2f:
98:5a:ee:b4:c2:c6:c5:97:63:97:4e:b6:e1:21:a4:
ea:aa:d9:f3:2b:11:7e:09:43:05:74:f5:e5:e3:b6:
59:fb:92:52:27:55:68:80:45:7c:b6:af:db:2f:92:
63:2d:59:56:6f:5d:44:54:0f:11:31:87:8b:c0:79:
91:71:95:57:4f:4c:04:f2:4b:8e:8d:e4:e6:55:0b:
36:63:8b:2f:4e:71:50:9f:cf:54:ec:44:5a:53:b5:
16:95:8c:81:09:24:90:38:fc:95:9f:26:d1:e5:84:
25:b8:74:9c:35:de:28:81:39:1e:77:3f:cf:ef:53:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:95:4F:98:A7:36:34:1D:0D:F1:0C:6B:17:5C:F1:BD:F2:9C:C3
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3e:e9:cd:13:7d:0f:48:3d:21:57:ed:7a:9c:1d:a4:ac:cf:
86:8b:d2:b4:e0:b7:ba:66:38:a7:03:60:da:da:1b:91:8f:03:
6b:be:3b:b5:3f:82:d9:3b:b9:d8:86:b2:c9:bd:b2:fa:ba:97:
ef:04:51:a4:da:34:98:6d:0b:7f:b8:b6:a3:f9:10:7a:52:f8:
cd:39:3e:e4:f8:29:8e:0b:a3:8f:6c:2f:03:76:5a:12:f0:01:
67:f0:68:62:7c:ea:54:38:34:33:df:a8:0d:36:01:bb:c4:89:
ad:04:71:8b:c2:bb:82:97:bf:12:ac:94:4c:49:c6:b8:6f:45:
c9:2b:67:1b:2f:9a:a8:65:17:5e:36:dc:9d:80:00:c8:f0:a8:
aa:11:13:0b:a6:89:bc:47:59:53:09:23:e6:26:ef:d0:30:64:
aa:6e:f9:8c:57:68:8e:ab:0f:07:ab:4a:0b:42:18:b6:12:57:
f0:04:c7:1e:3c:ab:7d:e4:90:d9:a3:35:2d:35:bf:7f:5a:c6:
60:6d:bc:56:1d:4b:fb:8f:3c:90:f2:37:99:27:97:75:e8:3d:
c9:2e:cc:4d:be:e7:a2:f4:09:62:69:9e:61:7c:a4:64:2c:24:
74:7f:6f:3f:5a:9b:58:df:94:30:14:a5:27:a5:b9:f9:01:94:
a9:10:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:37 2026 by rpki-client