Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: QmIzSJdijehwavUCIxPMsz7bNfgM8zaUUpIMl5JlHFU=
Subject key identifier: DB:BC:B7:CB:BB:5B:C7:47:18:D5:D3:73:AF:FC:E3:75:BA:7E:90:C6
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019D265F14637322DD1BF6F505E909BD1F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: ZVLPlt/tn+JL62LfPInP0ab3tVajMSPrxfhLTlsmJVA=)
2: eG7fxABMtqyI5yUjBnhzemDqnwY.roa (hash: HFmCfi29zh6VfW2O1TlhihYlPxvODE9zNcg66Ls00yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:14:63:73:22:dd:1b:f6:f5:05:e9:09:bd:1f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=dbbcb7cbbb5bc74718d5d373affce375ba7e90c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:58:74:59:2b:04:8d:71:08:b1:54:36:b5:
9e:a8:46:1a:ee:4b:e2:88:ed:1b:63:e9:71:34:8a:
a7:43:6d:dc:ba:77:2a:fa:92:2f:07:6e:51:51:cd:
d5:40:c9:66:30:af:f4:da:9d:9f:87:49:ce:76:cd:
11:71:90:12:93:20:f7:1f:c7:9b:1a:0f:9c:11:c5:
c0:72:e8:a3:ae:72:67:82:57:80:0e:5b:11:26:8e:
35:d8:ad:a8:a1:58:53:26:fa:40:ea:b7:5f:b6:38:
a8:6b:1e:e4:81:b9:a1:dc:bc:25:35:07:48:8d:25:
c3:94:1d:4b:35:c9:3e:2b:83:d7:53:5d:06:9c:2e:
cc:12:c9:b1:9b:5b:73:18:db:54:fa:db:e8:ca:82:
1d:b3:49:2b:f0:41:e5:80:e0:2d:78:a4:b1:d4:7a:
ee:ef:09:77:0a:11:8e:ec:0e:fc:86:3e:95:60:54:
86:25:c5:2e:29:6d:80:4a:5e:30:01:52:9a:05:ca:
b0:4b:44:73:ba:bc:57:f5:19:57:25:9b:ae:04:5a:
a2:fd:9c:b8:19:55:5c:d6:83:31:98:21:49:b1:f6:
2b:4a:84:69:34:03:6f:10:31:3b:5b:c1:c8:9d:63:
89:09:84:de:7d:28:7f:24:4b:d6:3f:87:9a:d0:95:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:B7:CB:BB:5B:C7:47:18:D5:D3:73:AF:FC:E3:75:BA:7E:90:C6
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:82:3d:0f:a2:84:bd:68:80:63:1e:f6:9c:93:5c:9f:f0:
17:f6:25:3b:c6:2e:01:26:cf:7e:34:61:04:fd:aa:59:ba:4b:
c6:68:e1:e9:8c:01:9d:d2:e8:b3:6d:db:35:70:80:0a:a3:b6:
22:11:d6:8c:9b:df:ee:68:b3:ba:43:29:45:30:1f:c3:f7:f2:
5e:89:d0:89:66:ba:54:a2:cb:a5:14:93:49:2f:43:d4:5e:df:
16:0b:d2:9f:7c:41:f1:33:0a:58:9a:9d:c3:0c:46:7c:74:01:
8f:e4:bd:2d:d8:ff:b9:7d:6d:1b:f6:f5:8b:4a:79:57:8c:5f:
16:96:67:0f:7e:25:48:c7:76:1f:d3:1c:ed:55:2c:1b:ea:26:
a6:23:35:a6:3a:b0:ea:b3:12:b9:e4:95:d6:fd:f0:5b:77:1f:
cc:e6:04:6b:a2:8a:56:71:64:b2:d4:24:8f:ce:fd:64:5b:24:
f2:0f:f4:81:d5:26:97:d0:ab:9c:9f:c1:30:fd:bf:5c:16:45:
91:37:dc:12:4f:59:3e:13:e4:d3:77:55:3b:d3:04:29:56:bc:
b1:90:c2:df:2a:6e:81:41:37:d8:34:87:5b:ce:16:ba:0d:5e:
f1:f8:8a:57:3d:a5:47:6f:94:12:f3:ad:a5:63:bc:45:43:8a:
29:d4:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:18 2026 by rpki-client