Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: bgzvYKFH0ByDSco7qNnE0IPwlD92uP1utdfl7eIJVNc=
Subject key identifier: 02:E6:A0:80:8A:DD:96:E4:F3:DF:32:EB:9C:E2:E7:49:18:65:DE:51
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 019D277225987BEE028826D93E9FB713BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: bpbMXDQwFsM6KWjvHIMU3d8UTzn435OOrI8AZcMUWf4=)
2: eiZ3dRoJQOY5In2On20-nf-q73k.roa (hash: GE2likVbzstV6xbMDw5q0Xw8FdnZheeQhcKCOGkCp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:25:98:7b:ee:02:88:26:d9:3e:9f:b7:13:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=02e6a0808add96e4f3df32eb9ce2e7491865de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:43:f6:c5:61:64:72:ec:63:98:be:c4:72:
39:ec:6f:d0:e9:38:19:35:a4:2e:b0:90:0a:f4:14:
7e:2e:af:5a:7b:b4:fa:7e:6c:a0:44:2b:a6:a7:3f:
7e:f8:73:09:e4:8f:74:0d:fe:49:71:cd:49:9a:51:
f8:9e:ed:47:a5:fc:e5:4b:8e:f3:fd:cb:45:93:01:
24:80:a7:1e:df:b7:92:23:8e:69:26:9e:d7:0c:6c:
c6:da:57:bf:1c:f6:f4:f2:bc:7c:89:17:72:3d:1f:
3f:73:14:6a:67:e1:c7:86:ee:34:7d:ff:89:04:29:
66:8f:51:26:39:c4:73:c5:54:1c:7d:c6:1b:a5:fe:
70:38:e7:06:94:73:0e:8d:72:86:07:93:63:bc:ee:
dc:4a:24:4b:04:59:1d:8f:21:81:9b:45:94:0d:a2:
fe:df:a7:88:8c:4e:95:8c:f1:9b:18:f1:2b:dc:27:
42:81:d2:7a:8c:d7:5e:5b:34:a8:46:a7:1d:69:d5:
06:d5:13:32:cf:e4:9d:34:28:1d:e9:6d:f8:22:ae:
a9:5d:97:88:03:6c:fa:7a:d9:9b:f6:21:41:4e:da:
c0:31:65:ee:d6:21:25:2d:05:f0:46:e1:ce:4b:88:
9c:c4:fd:df:71:f7:24:38:d8:17:71:7d:ec:dd:e5:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:A0:80:8A:DD:96:E4:F3:DF:32:EB:9C:E2:E7:49:18:65:DE:51
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:61:8f:dd:d1:16:34:54:03:ad:21:93:ca:19:83:e7:05:
0d:ae:61:6b:6c:35:da:02:88:2d:f4:4f:c5:d3:dc:31:c3:f1:
cc:0c:41:37:17:0a:37:36:c7:3c:92:7d:f9:93:1e:8f:01:66:
8d:f6:9d:8e:f1:72:1b:fb:1c:6d:2e:cd:76:b2:ca:ea:b9:28:
89:f1:ba:c9:b4:a6:c2:c2:16:43:bc:ec:fa:d0:fe:09:b5:1c:
1a:2d:8a:48:70:b3:a3:47:a7:fc:0d:fe:c7:d2:a9:17:c1:d6:
82:7d:fc:a7:17:db:38:a3:a9:eb:d6:85:56:ec:c0:31:d0:70:
c2:68:66:2b:a1:db:53:e5:2a:36:2b:27:33:0e:36:28:bb:63:
fe:b2:a9:7d:18:32:81:51:d1:a1:4d:ba:d3:d1:77:61:ae:1f:
89:1f:20:5a:b4:4c:21:1a:83:e1:c9:fd:0a:b0:8c:ce:2a:56:
04:82:64:91:b3:c4:58:93:1e:5d:d0:47:c0:ab:3d:bc:52:f7:
78:44:9b:84:cb:cd:5e:f1:29:5d:18:4d:ae:63:57:ae:84:78:
03:0e:5a:5a:a4:6f:eb:ae:35:5c:c1:d2:bd:b9:c2:d8:c6:e5:
8f:2a:e5:ce:da:8a:db:13:3c:ee:8b:70:b0:05:ad:56:89:e1:
26:96:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:07 2026 by rpki-client