Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: FiQmssjbd5FADiwK0v5FC234leKnyrlaMPGFJYg05/g=
Subject key identifier: BF:4A:88:F0:6A:FC:09:EA:6B:E6:02:F1:81:08:DD:4B:42:FA:06:EB
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 019D26CD434CC8A8DC498E322507C13CC2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 21:01:19 +0000
Manifest this update: Wed 25 Mar 2026 21:01:19 +0000
Manifest next update: Thu 26 Mar 2026 21:01:19 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: TavhQ950skOqWWc8wqQOwxupWszfuCOjhTGujcwY8Rk=)
2: XduW4CBIQXx5gf7im8c_KWeejns.roa (hash: khvq/3b+OvcvNxVFIdvoIzkoKq7bskcSfHtiGKsUD3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:43:4c:c8:a8:dc:49:8e:32:25:07:c1:3c:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Mar 25 21:01:19 2026 GMT
Not After : Mar 26 21:01:19 2026 GMT
Subject: CN=bf4a88f06afc09ea6be602f18108dd4b42fa06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:91:e5:12:76:3e:3e:d5:d8:9b:d1:12:41:
41:92:7d:35:cf:ec:97:00:d9:e9:10:c3:5f:25:d4:
13:c0:86:5d:b7:3d:1a:6f:7c:49:aa:10:46:75:9c:
e2:0c:52:aa:17:a1:29:bb:42:d3:3a:62:9f:f0:70:
16:cf:37:db:c6:4f:0b:68:a0:92:17:0b:c3:6b:7b:
33:ed:1b:68:e6:99:c0:4c:76:a6:c7:0d:1c:2b:01:
6d:d3:23:68:48:a0:29:72:54:3c:5d:45:cb:3e:0e:
cb:75:01:91:23:ae:a7:4b:0f:86:ca:97:ef:d3:03:
2e:08:41:55:3f:9b:56:3c:9b:19:f8:82:80:e5:bb:
16:a5:77:6d:6a:25:34:58:ce:21:95:c9:5a:c6:95:
0f:78:bc:ac:c1:69:fe:7a:6c:29:f7:6a:4a:39:ea:
c7:cc:0c:07:82:98:37:11:c0:1b:cb:c3:ac:bc:fb:
36:98:37:4a:b7:21:1f:e1:ca:a6:bf:bc:4f:41:e8:
27:3c:9a:28:0a:7a:18:10:a7:ed:00:08:a9:9a:00:
b4:f4:99:ba:d3:92:92:49:19:e8:84:a2:39:1c:3f:
43:81:06:0d:5e:3a:52:58:fc:0a:61:0e:ee:bf:d6:
a2:bb:09:b4:9d:c3:a0:37:43:99:17:04:2a:0e:7b:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:88:F0:6A:FC:09:EA:6B:E6:02:F1:81:08:DD:4B:42:FA:06:EB
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:10:bb:9a:54:a3:83:65:55:04:7f:26:36:2c:9e:eb:0f:44:
fe:d5:3f:d3:90:c7:7a:51:71:91:50:2c:6b:ab:cc:0d:dd:26:
a8:13:c9:1b:3d:78:77:90:f2:ae:33:b0:d7:76:2b:25:58:97:
ba:4a:2c:f8:7f:e5:92:13:eb:74:7c:a4:e7:b2:d8:b2:71:47:
ad:29:29:e7:bd:d0:6b:2e:37:e5:32:58:c1:c1:70:61:49:ce:
f4:cb:d7:a7:57:3d:57:c7:c1:e2:0a:53:7e:eb:0b:53:ee:2d:
68:8a:4a:c3:7d:52:d5:69:1c:a1:1b:d1:ef:57:14:c5:44:72:
ec:fb:5c:f2:bc:73:49:68:bb:65:8b:76:3f:62:1f:fa:e1:46:
32:14:30:ca:b4:76:a3:4e:bf:83:bd:40:cc:30:94:29:1e:79:
7c:98:e8:47:e9:a1:eb:78:19:e6:30:f3:e6:4a:9f:15:1f:66:
1f:a3:01:9f:17:3d:73:ab:ee:d7:64:25:7d:6b:fb:3f:d6:0e:
9a:5d:a0:19:a4:ad:bb:57:1d:21:5d:78:1a:21:0a:69:65:dc:
29:8a:d5:2c:ad:ca:cc:90:22:49:91:30:f6:fa:09:21:3b:3e:
38:66:83:3c:15:9e:33:7e:5a:d8:d5:81:7e:df:6f:95:d9:b8:
8e:ae:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:08 2026 by rpki-client