Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: Jxpyccj2WkLSIhq6ZgXDLG8+iMGPWI1bFQnUUWGC924=
Subject key identifier: A4:41:7F:72:F9:D6:E2:ED:58:0E:DE:B8:55:5A:75:F5:89:CF:9C:5B
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 019D2B4E02A88F1E8FC781274115F5DBCCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 18:00:25 +0000
Manifest this update: Thu 26 Mar 2026 18:00:25 +0000
Manifest next update: Fri 27 Mar 2026 18:00:25 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: rWm+eCwLsIKypYgj5WWtmUDYQghLpNPUxXLM9q/jEYE=)
2: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (hash: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:02:a8:8f:1e:8f:c7:81:27:41:15:f5:db:cc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Mar 26 18:00:25 2026 GMT
Not After : Mar 27 18:00:25 2026 GMT
Subject: CN=a4417f72f9d6e2ed580edeb8555a75f589cf9c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:3d:90:ee:76:dc:d9:7c:e8:20:95:64:b9:
58:02:ba:25:91:c1:ed:1c:81:22:2b:e8:bf:8e:95:
71:80:e0:16:1b:37:be:ca:1f:4f:1e:d1:8e:8e:6c:
bf:9a:24:e4:9d:c5:a5:d1:1b:2d:52:ee:dd:79:66:
35:2a:c4:08:d7:79:ce:83:f2:9f:06:c6:8d:1d:e9:
5a:85:b1:cb:e1:9a:02:95:ed:64:46:fc:ee:43:03:
2a:ed:db:06:d2:c3:3f:c2:04:84:4b:9c:12:f3:0c:
d4:41:79:a2:51:8d:fa:f7:b2:78:01:af:ac:d4:83:
46:a8:74:47:3a:2e:44:1b:d1:0f:ed:af:ff:fc:77:
37:c7:96:0b:ea:52:75:9d:ff:de:6f:22:a0:ba:92:
73:b2:4b:f6:48:67:e4:41:22:30:28:83:64:cd:b3:
48:2b:6a:fb:ab:50:b9:5e:fe:f6:50:39:56:61:31:
e5:ba:ef:04:48:32:57:38:0f:d5:d2:e3:e6:1d:2b:
8a:09:eb:a4:99:61:49:23:8e:4b:ac:7a:15:a7:b1:
26:16:d2:73:79:e5:54:63:02:d4:a3:fa:37:44:f5:
61:b1:02:4d:54:82:7d:c4:97:ef:68:f0:f8:a4:35:
06:18:67:f8:de:b3:8e:52:7a:eb:f8:b9:97:fd:d0:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:7F:72:F9:D6:E2:ED:58:0E:DE:B8:55:5A:75:F5:89:CF:9C:5B
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:63:89:b1:cd:66:d9:80:74:e2:79:91:77:6d:0d:2f:cd:
8f:0e:29:3d:64:83:a4:2a:43:89:b4:c6:78:54:ae:39:dc:0e:
a0:aa:2e:11:eb:33:d4:15:78:c7:17:d6:b5:98:cb:73:71:48:
9f:26:53:c7:f3:fa:a9:7a:98:50:c8:a6:6b:d0:6a:4f:44:ce:
f8:27:98:45:51:6d:4c:62:43:b1:5b:0c:63:ca:17:25:20:1b:
07:de:7d:a4:0e:97:94:c0:2a:08:30:16:7a:43:a5:0f:c3:e1:
19:d6:40:2d:1d:a9:9f:74:be:5c:00:9d:2d:8c:b2:86:7c:f1:
b2:e0:21:29:f0:2e:e0:b4:d2:58:f6:7b:11:9d:4b:99:11:74:
a1:58:39:1b:f2:65:49:07:c8:2b:f1:ae:e6:07:88:96:75:01:
d9:c2:51:8d:43:c8:47:5a:37:b9:82:f8:13:94:03:09:7a:0b:
1d:9f:d3:03:18:8a:af:32:6a:a6:09:da:04:44:48:cd:4a:e3:
b2:5f:a0:ca:15:d5:b4:59:89:fa:ba:b0:c0:ea:62:91:dd:c4:
53:9a:9f:8d:0e:27:50:a5:2c:68:f7:82:7f:63:2e:3b:1f:ac:
ff:ad:a1:c9:6b:b2:34:ef:03:6e:fe:fe:d1:73:29:24:22:ae:
38:39:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:51 2026 by rpki-client