
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: 5S8mphIdlZ7O/uYBw9vfb7tyqcLm+lpTwChkvAWHNz4=
Subject key identifier: 97:52:59:8C:E7:1A:FD:0A:94:3F:66:F9:6B:DC:6E:2B:7B:D9:AF:F6
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 019D25F1E1B601353396BBD46AA9F29793E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: BtsDzrXckJ7DeoRfNz5pBybmuYg7YOld0EBSReyPadg=)
2: otrcKIXq_A9uaKlz_d5wq-4G144.roa (hash: 384/aWNa4g4uNh0J2+RFW9VIMxNrtEwydVkvP0K9KIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e1:b6:01:35:33:96:bb:d4:6a:a9:f2:97:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=9752598ce71afd0a943f66f96bdc6e2b7bd9aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:1d:db:b3:2f:73:f1:21:c6:77:93:39:7d:
c0:00:e6:90:91:c6:1b:78:a8:82:a8:9e:c3:55:d7:
4a:f0:e6:92:43:94:e6:53:1c:aa:ba:1e:96:1f:13:
1d:9d:d8:b8:f0:de:25:ba:31:07:a7:7e:3b:e5:03:
1b:ae:38:5f:bc:56:de:62:6c:d1:86:1d:b8:46:f9:
39:e0:2b:37:1c:23:c1:33:9f:6f:ef:22:54:e2:2e:
e5:82:c6:15:22:d2:8f:24:32:e0:0a:f6:84:a3:4f:
6e:ed:96:54:d7:d2:14:b4:09:e8:39:b9:cc:09:12:
03:50:d0:bf:ab:1d:04:7b:5c:49:e5:32:4a:1f:84:
26:83:c3:97:27:aa:06:cd:51:02:9b:7b:33:23:ae:
fd:90:2f:ad:33:b3:ef:0c:62:92:af:a8:60:e9:30:
f9:ec:5c:27:15:ce:5c:31:0d:95:46:71:af:85:c1:
7d:a0:bb:05:c0:80:a8:90:71:22:d8:1a:a3:f8:c0:
76:58:53:bf:3a:27:d5:c2:3c:70:4e:2b:6a:0e:30:
e0:bb:58:b8:14:1c:c7:2e:1c:2a:ff:51:bf:20:71:
06:2b:e5:c2:93:8b:e1:12:c1:a9:7c:2c:36:5b:c1:
0f:57:f2:ce:1f:bb:32:24:26:ec:9b:ff:de:aa:b4:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:59:8C:E7:1A:FD:0A:94:3F:66:F9:6B:DC:6E:2B:7B:D9:AF:F6
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:e0:35:98:24:d7:0e:32:9c:f3:fa:9a:70:0e:c7:c9:1b:
78:e4:57:3a:5c:0e:b5:1c:e2:ed:c2:41:23:11:2e:c9:fc:69:
30:4d:5c:fe:6d:c6:35:f9:8a:62:6a:00:84:8a:f1:95:02:fb:
2f:65:c5:56:f6:78:91:57:00:e2:0a:73:02:5a:f3:74:a1:e5:
de:f7:86:26:13:1b:a2:cb:09:62:c5:cb:9c:63:d8:d3:3d:ba:
33:c4:31:27:15:9e:1b:ec:46:55:45:2b:9f:9e:19:67:c5:5d:
f3:d0:95:23:89:40:ee:7c:ef:f8:43:19:f0:4c:e8:2a:4f:b2:
d4:d7:84:ea:0d:22:a6:1d:ae:38:46:d5:84:59:4c:4f:da:6b:
fc:12:30:b7:52:7b:ba:3c:79:e5:66:a5:f7:0d:71:d9:29:4d:
11:e1:17:01:ff:8d:b9:51:b4:2d:41:09:9d:bd:3f:59:b1:af:
9a:aa:02:5a:24:85:30:eb:81:97:1d:a2:16:e0:1c:2d:55:7d:
ed:30:b7:ee:8c:d9:ff:6c:d5:31:12:39:8e:6c:e5:95:f5:96:
67:d2:e2:c9:0d:04:33:9b:1d:de:b6:45:40:7a:23:41:51:81:
72:e5:85:bc:93:b8:f1:7c:62:f1:d3:4c:ac:c5:b9:b9:cc:a1:
3a:28:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:48 2026 by rpki-client