Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: NYDeaif72EbJqu8yZL9GDo2ULtTVcXtUSSWFzC+64mM=
Subject key identifier: 7D:20:5C:1C:41:4C:34:E9:CF:0A:FC:4B:FD:D5:C9:08:FE:5B:DC:01
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 019D2C97EA1857DF1FC47EBF9719296562A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 188A
Signing time: Fri 27 Mar 2026 00:00:46 +0000
Manifest this update: Fri 27 Mar 2026 00:00:46 +0000
Manifest next update: Sat 28 Mar 2026 00:00:46 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: n8EwooT8ZJpyPGpKuSLPDPiHW2WqudJLn9sfDLQX7uQ=)
2: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (hash: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:ea:18:57:df:1f:c4:7e:bf:97:19:29:65:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Mar 27 00:00:46 2026 GMT
Not After : Mar 28 00:00:46 2026 GMT
Subject: CN=7d205c1c414c34e9cf0afc4bfdd5c908fe5bdc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:e1:23:21:67:a0:c0:e8:a7:8c:86:7d:ad:
02:10:53:37:91:a1:18:9c:01:12:72:41:d9:9d:9d:
68:e0:b1:af:2d:fd:20:d0:0b:d3:8d:55:49:2d:d5:
31:00:0b:75:57:46:8d:1c:49:6c:dd:d0:6a:1a:94:
2a:1f:fe:ec:6c:fe:ce:9d:cb:fe:ec:a0:f5:17:0c:
21:3b:7e:5f:8e:d3:ff:2e:ba:ed:a8:e4:e4:fc:55:
0e:6c:b7:56:ff:a6:36:9a:c0:20:1c:2c:40:e5:39:
10:7e:fd:44:2e:95:b6:2c:bc:ca:a6:4e:c9:4c:38:
66:2c:2f:07:1b:c1:0a:a9:ae:f4:60:74:90:9c:d3:
52:d9:55:74:9d:89:fb:d8:aa:8c:9e:5e:6b:9a:79:
9c:ea:bf:5e:46:9f:68:c1:43:b4:2b:7d:9c:70:6e:
f7:29:ed:f6:4c:39:2f:01:4e:70:9a:df:68:f9:cb:
fc:44:03:6a:86:49:d9:60:28:1a:65:93:5c:79:7f:
de:42:70:1f:e3:7d:07:2d:40:32:e7:1e:b6:da:c1:
17:55:38:78:96:4a:c4:74:3b:03:79:79:0b:d4:58:
ca:6d:31:97:a9:05:53:21:6e:29:e7:fc:d5:4f:47:
fc:7d:00:90:3e:19:14:ff:33:bc:75:51:bd:4b:0c:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:5C:1C:41:4C:34:E9:CF:0A:FC:4B:FD:D5:C9:08:FE:5B:DC:01
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:dd:08:da:3b:f2:eb:45:94:23:27:72:4a:a8:42:83:c5:
38:aa:45:9c:6e:e9:1a:d8:9a:d4:cb:3a:fb:b2:a1:62:01:9e:
8c:e8:63:9f:1f:36:aa:cd:a1:7c:f3:49:45:23:b3:a6:b2:d2:
53:43:c7:f0:b0:3c:34:b3:2a:59:0e:64:d0:30:97:10:8c:db:
80:b6:45:5f:37:8d:a7:a6:ab:96:f4:92:1e:6c:1f:7a:ee:9b:
77:88:78:5d:6e:b3:df:3b:a9:09:2d:d2:45:b5:28:e8:1c:10:
81:85:5e:a3:0f:8f:4d:69:42:41:07:da:cd:6d:f9:79:6e:3d:
3a:97:16:eb:97:cd:40:6d:dc:41:2b:b9:8d:ba:40:68:aa:1e:
3e:1f:7e:f3:ca:82:eb:10:71:fa:af:11:5c:61:89:da:b6:98:
61:99:3d:87:b6:eb:c2:ba:62:66:43:1e:fa:6d:4a:96:f1:b0:
22:ae:d7:46:3c:7d:34:1f:f1:be:48:8f:e8:de:2b:7c:51:95:
1e:39:78:86:cf:7c:17:e4:2d:20:0a:fd:6e:b7:f2:4b:f9:c4:
3d:15:1b:39:ab:ea:cf:bb:8b:e9:b4:88:cb:3b:de:eb:5c:d7:
20:b5:69:d4:f6:ff:c7:5f:8e:9b:f1:1d:cd:7e:ed:27:ae:24:
1a:b0:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:24 2026 by rpki-client