Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: HFUUMCTOdqsdcfIP33HdvWk/WcQzqrYyp8UVZlxecBc=
Subject key identifier: 79:46:95:FC:BF:DB:F2:F2:73:31:98:30:B5:54:BC:98:53:2A:AF:B7
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019D2A7287D9FE0B37939720728DAFF60841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:42 +0000
Manifest this update: Thu 26 Mar 2026 14:00:42 +0000
Manifest next update: Fri 27 Mar 2026 14:00:42 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: jWdrBX1xKXaWbUSweucajK3OatiMRkwzxG809IdI7ak=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:87:d9:fe:0b:37:93:97:20:72:8d:af:f6:08:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Mar 26 14:00:42 2026 GMT
Not After : Mar 27 14:00:42 2026 GMT
Subject: CN=794695fcbfdbf2f273319830b554bc98532aafb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:8a:47:16:0e:06:b5:49:94:47:8d:dc:58:
0c:0e:51:ba:35:b2:7f:db:f4:5d:1d:69:3e:3e:c1:
d2:68:8d:22:82:4a:fa:29:af:c1:85:6d:d3:13:1b:
df:53:b7:1b:92:b0:92:7d:d6:a0:76:40:48:80:2c:
6e:52:9e:a8:cc:e5:ef:fc:fc:bb:92:cc:c0:2d:cf:
9d:03:76:b8:b7:c5:27:c5:1c:c0:d6:b5:1b:4f:49:
72:b7:89:bb:86:4c:e6:0c:c2:b0:2e:fc:68:b6:3f:
cd:d1:0b:32:73:1c:97:4d:e7:fb:ed:3c:a0:8c:f0:
bf:af:59:21:33:45:1c:ad:f0:ab:2b:ed:a3:c8:a5:
d3:ce:68:db:50:71:55:aa:8a:19:76:06:32:3d:de:
a3:cc:1b:44:ad:05:28:7d:47:7c:87:a0:1a:a1:88:
f7:11:db:32:9d:24:be:15:8a:ee:eb:f7:ee:4e:a0:
a3:ba:a3:4e:96:ef:c7:0f:00:37:00:0f:c4:56:d1:
a8:31:0e:bb:07:e6:f0:82:27:33:b5:3e:00:16:cf:
59:6c:8d:89:cb:bf:6f:1a:65:ec:26:b1:2a:74:7e:
78:43:32:26:79:8f:90:d7:07:8b:80:7a:b8:ed:08:
41:2d:54:19:a5:ec:ba:a7:81:e9:8a:55:b4:df:e1:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:95:FC:BF:DB:F2:F2:73:31:98:30:B5:54:BC:98:53:2A:AF:B7
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:86:62:d5:11:7d:ed:8a:c5:ae:b5:89:1a:10:3d:64:fe:
2a:df:a5:0e:0c:1b:de:bd:82:86:72:a7:99:9b:5a:ae:99:c9:
39:36:a8:44:7a:c7:ee:18:8e:f7:48:c3:c0:ec:73:93:5e:ed:
1c:ca:e9:02:77:9a:c5:5f:75:f5:32:42:57:db:17:83:e4:91:
8b:e6:e0:de:36:72:d4:5c:55:38:c9:3f:99:46:0d:0c:76:69:
82:06:d4:2a:78:c5:ef:48:2b:93:68:d7:1a:0d:04:73:de:35:
72:b5:83:04:95:ee:0c:a0:d5:ca:c2:a2:7f:ca:52:70:d7:6b:
84:7a:13:90:49:13:3c:cf:2b:90:6b:a2:da:ad:66:4e:eb:9b:
e0:b6:4a:20:a7:82:2b:0a:82:5e:03:cc:34:a7:2b:33:b8:37:
7d:19:dc:ce:fe:3c:28:28:c0:41:96:ec:35:f1:08:ce:61:68:
9f:a3:e5:03:eb:e1:db:80:14:6f:e6:74:93:f2:c1:56:ce:f5:
61:c4:2d:a7:36:39:8b:7a:3a:f0:f4:eb:e0:36:f3:a2:5f:59:
38:9f:7f:d1:d0:ce:4f:d4:1f:f2:93:84:cb:1c:e1:ea:b3:f4:
61:d6:9b:42:96:ae:e1:0e:37:cf:5f:d5:af:07:e8:57:f5:8d:
ec:bc:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:26 2026 by rpki-client