Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: uHaGomaJLfdxD8y6AFS9Ner7nkBfNA/roF3b7cyh/Ms=
Subject key identifier: 53:F2:E3:A4:E6:73:91:7E:BE:A6:77:23:43:E7:7C:F7:1A:20:6F:62
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 019D28F23F74C749D48159E1091F5E6651F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: Z/HEBXFn2M5x4JjNbL4IHqxas0mppw7E+vZr9VxTrbY=)
2: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (hash: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3f:74:c7:49:d4:81:59:e1:09:1f:5e:66:51:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=53f2e3a4e673917ebea6772343e77cf71a206f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:73:eb:25:3f:c9:27:b5:df:ef:d6:71:05:
aa:63:db:d5:3e:58:4d:3c:24:15:6b:b8:94:13:5e:
63:18:6b:f5:de:04:45:31:97:fd:07:4f:40:67:e2:
a9:c7:c6:30:5e:1d:d2:8d:0d:45:a0:59:e6:d2:7f:
4a:8d:a1:30:80:2f:8e:f7:21:3f:ba:a5:36:39:4c:
6b:7e:d5:88:1d:e5:ac:ea:85:11:56:b5:0f:54:ea:
5e:04:e6:42:65:c1:a7:b8:a4:a9:e7:e5:53:0b:45:
1a:72:15:5e:6e:a4:2e:79:23:6a:97:49:6c:9b:52:
96:72:e4:29:fb:44:91:12:db:d7:77:a8:9e:e8:d0:
5e:63:c2:8d:5e:8b:3e:4d:83:46:81:4b:e9:ff:06:
d8:4d:60:89:ea:95:43:79:0e:36:61:6b:f7:cc:ad:
94:3b:70:5b:33:b9:5a:5a:a1:07:ab:ff:17:b9:b4:
a4:21:43:33:6c:d1:0c:6a:11:81:74:5d:03:1b:32:
aa:de:eb:d3:b1:32:06:38:43:28:48:19:ba:bf:16:
5c:bc:f6:1c:4d:f0:7d:a1:f9:9a:89:f9:a1:1a:18:
f7:9b:1e:6d:78:70:9a:b0:a0:d2:4a:1f:9c:0b:c4:
a1:c2:ba:a6:40:01:7c:fb:6c:ea:d1:82:12:b0:72:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:E3:A4:E6:73:91:7E:BE:A6:77:23:43:E7:7C:F7:1A:20:6F:62
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:82:fd:2f:cb:5c:db:d1:7c:2d:f8:27:d6:7a:d9:9b:17:11:
49:56:db:f6:e2:6e:34:a6:c2:75:33:70:58:25:ba:dd:76:63:
f8:bd:7c:f6:f7:98:83:30:64:7c:69:45:0a:87:5b:32:bc:8f:
e8:36:67:18:48:97:bd:5c:29:30:d2:ee:f3:e1:ef:4b:95:71:
62:29:f5:a0:ab:8c:91:09:c2:df:89:03:51:c9:05:ec:db:91:
83:c4:09:4a:82:3d:a3:fc:13:c0:60:da:58:af:75:6e:0a:81:
ed:a9:7e:1e:1a:1b:85:d5:2a:2a:f6:73:da:01:5a:03:e1:a8:
e1:a2:92:16:63:59:96:7e:27:45:32:29:16:8a:fa:66:49:f4:
37:4d:71:55:c0:dd:75:59:e5:89:ea:b2:2a:d1:36:fc:45:b4:
2d:60:65:10:d0:c3:92:a1:9c:6c:76:02:df:31:00:64:8a:68:
c6:44:14:b5:a3:ad:ba:97:b3:1d:51:a5:f8:24:15:83:62:7d:
80:ae:7e:55:15:94:31:3c:be:8c:8c:db:4f:40:c2:71:67:cf:
7a:77:a7:09:1d:6a:0c:27:d0:04:4b:cc:51:50:14:3d:9b:14:
64:c6:51:e3:85:78:89:c0:25:15:46:c3:ff:31:53:1b:a5:98:
8c:a2:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:26 2026 by rpki-client