Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: ZRF7aBG/h/mUjVUuCVqxYDGAIvzEDnkyA3Fd7mPs0A0=
Subject key identifier: 29:48:2E:A5:E3:29:0C:01:05:6E:F4:70:2A:C0:13:75:7D:A0:20:7C
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 019D33764F13E663BB6C31B0CA74B0FE3216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 08:01:24 +0000
Manifest this update: Sat 28 Mar 2026 08:01:24 +0000
Manifest next update: Sun 29 Mar 2026 08:01:24 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: eUIdPVfZlqXGKvhzGkWEh7VkxkmSghvE9M3tBWanqb0=)
2: UQBamIu_tf9wPCOvESltx6uxaSM.roa (hash: 0H4wa03fUeDSOPCaqZfvn2P/bbZkgwu98158FsqzTX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:4f:13:e6:63:bb:6c:31:b0:ca:74:b0:fe:32:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Mar 28 08:01:24 2026 GMT
Not After : Mar 29 08:01:24 2026 GMT
Subject: CN=29482ea5e3290c01056ef4702ac013757da0207c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:f2:41:73:a7:ce:46:2f:ad:65:53:ae:0a:
dd:46:3a:cf:91:7f:20:1f:7b:b9:d6:76:8a:04:66:
38:04:0c:9d:83:55:4e:d4:95:11:a0:89:35:62:0d:
97:b4:fd:e5:86:7d:9e:7d:3f:12:08:4c:b0:1a:d0:
6e:4d:ec:a6:9a:81:15:e0:c7:62:ef:b6:a8:ae:41:
11:54:c8:97:29:59:25:b3:90:1c:a2:56:a7:50:f0:
8d:b6:5d:62:24:06:5d:08:87:45:aa:1d:55:4c:fe:
2f:3c:f6:17:a1:36:2d:0d:d5:20:ff:97:bb:a0:67:
0a:01:41:f1:57:19:ce:73:f8:7a:a8:71:8e:22:f0:
a3:ae:9c:ef:46:00:1e:e4:07:f2:57:4a:4a:ea:94:
06:01:e0:55:43:6d:a1:f2:6d:4c:f7:fe:54:13:9b:
f9:53:c3:85:db:79:7a:ca:72:47:72:ed:4a:a4:bf:
59:ca:32:e6:74:42:74:61:b0:d7:a9:28:fb:68:06:
04:49:aa:64:38:25:bb:12:78:2d:90:f5:9a:f5:11:
8c:ac:c4:d7:66:d4:b2:8d:da:dc:78:df:3f:52:ae:
dc:f2:7d:c8:a6:85:3c:d5:34:1c:b6:4b:70:57:5f:
08:3a:4a:5f:c1:9b:3d:81:d6:1e:85:0e:ac:ab:84:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:2E:A5:E3:29:0C:01:05:6E:F4:70:2A:C0:13:75:7D:A0:20:7C
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:3e:18:b5:bb:87:8d:d1:19:a0:92:d1:ef:4a:7d:1c:ee:
81:87:00:be:76:85:ab:6e:4b:35:58:a8:10:6b:ed:5e:a9:d1:
ee:eb:fb:9f:52:8b:25:16:d3:0d:89:9d:17:b3:7b:e5:ba:d8:
63:f7:4f:54:01:00:4a:cb:b7:dc:5d:33:0b:98:cf:b5:fa:05:
b5:fe:2c:e6:7d:6a:29:04:2e:f4:36:37:a1:db:37:8c:fd:ac:
99:9f:f5:99:38:2a:ae:e8:d2:56:08:9e:30:95:60:ab:0a:d4:
83:6e:e0:3c:a0:03:29:9b:bd:07:f9:2f:39:e2:bc:ed:da:be:
33:6d:ee:d3:7c:3f:19:1b:9a:6b:6d:11:c9:17:eb:a6:7f:8e:
24:7e:5f:f1:9e:a1:8f:48:57:51:eb:85:30:05:80:7b:bb:77:
63:3a:c9:ed:f8:f3:ba:b9:de:40:f3:69:a0:44:e8:4f:4e:4a:
f4:a8:e1:48:0e:30:89:28:18:9f:7c:41:b7:05:de:39:f4:f0:
17:29:a3:27:2f:06:0d:47:ce:e2:2d:6e:46:b9:e2:d9:45:8f:
ca:eb:c4:3c:3d:19:92:e8:4c:4c:42:0f:99:e1:cd:56:4c:11:
1c:20:30:95:89:38:4a:c1:07:19:4c:bd:77:60:07:43:5a:f9:
a7:67:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:02 2026 by rpki-client