Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: wE39KTkyF0aFJEEZxlI+simPh6RaQ4xDDBGhNIGOSSA=
Subject key identifier: B0:C4:1B:64:98:DF:D8:BD:E7:C2:8A:96:D6:81:5B:CD:3F:FB:60:1C
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019D27A8BDCC6794935CC2B688F3712C8D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: yBP12le6Fsy4BIMaILiAYEKx1dPZc7rS2VJ9Ggxeo9U=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bd:cc:67:94:93:5c:c2:b6:88:f3:71:2c:8d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=b0c41b6498dfd8bde7c28a96d6815bcd3ffb601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:f7:09:df:df:1a:bf:70:5c:82:95:1c:d7:
01:60:68:af:4c:bd:cc:83:31:ff:ff:d6:66:c6:c1:
18:d2:8d:b9:06:eb:36:34:8a:72:45:7c:2a:12:17:
76:e2:3b:c7:2d:5e:8c:cc:d7:37:09:1b:8d:0b:45:
f5:7b:bf:8f:f8:bc:e1:c7:e4:08:c3:b2:f0:98:30:
7d:ca:ca:4f:6d:80:35:b3:27:24:8e:1c:de:57:27:
af:e2:d4:5a:2a:82:8b:a0:40:6b:3b:53:89:de:64:
4d:cf:05:22:ef:6a:4d:bd:cd:e1:29:5e:60:3a:45:
ff:09:a1:0a:86:b4:5c:9c:96:1c:d6:58:83:88:cf:
81:4f:57:71:92:d2:ec:94:4d:ad:dd:b5:e0:50:a1:
ac:d1:34:22:32:3e:2d:51:b5:7f:28:41:6a:5e:f3:
d7:4b:43:b1:a7:e7:47:87:79:66:f6:de:69:60:8a:
7e:0b:35:55:72:36:98:01:3a:40:47:55:63:78:54:
74:80:c5:32:f9:2b:66:0a:83:2e:4e:01:a0:58:a4:
fc:e8:c7:4d:2a:2c:f8:f3:4c:7b:6d:c9:b4:70:d1:
d4:76:c3:e6:69:32:b2:ba:08:38:46:58:15:03:bc:
13:15:50:24:ba:0a:5b:d4:54:7a:b7:b2:f0:e7:1a:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:1B:64:98:DF:D8:BD:E7:C2:8A:96:D6:81:5B:CD:3F:FB:60:1C
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:3b:6c:61:87:21:bb:70:9b:3f:f8:de:c5:d2:01:17:95:
55:cf:9a:b5:e4:97:59:09:52:f3:9c:c4:28:12:2b:4e:3b:21:
7b:92:61:bc:b2:fd:bd:eb:37:df:6f:83:7c:49:9c:92:99:83:
24:cf:0c:b1:d1:8b:25:91:43:58:0d:d0:cd:36:57:f7:1c:f4:
63:cc:c0:3d:f4:47:c8:ee:1b:ef:e1:b7:9a:81:d1:48:51:a1:
ff:12:7e:a0:73:d9:3e:35:d5:5d:48:d9:df:a6:98:07:75:9a:
46:af:b5:20:f9:58:8b:47:d1:1b:cd:2f:cf:f0:8e:4e:cb:73:
ad:59:06:56:10:3e:a0:ae:b7:9d:47:ca:03:fb:16:61:22:55:
7b:9d:17:31:63:33:ba:56:c5:ba:61:b0:7c:b5:54:02:9e:d5:
04:fe:f0:44:5d:16:18:b5:b8:b6:0a:10:21:e9:0c:a6:e1:3f:
34:fd:40:ba:30:3f:3a:72:62:73:ee:2d:7b:27:82:12:47:01:
f3:e1:af:c6:0a:3d:fa:6b:9e:e4:a9:68:ac:e8:96:64:89:52:
e6:3b:a0:24:53:0e:3d:42:65:cb:5e:9a:5e:15:cd:f8:c1:02:
9c:54:bc:21:8b:57:51:1e:bd:c7:28:bb:60:16:6a:ed:2a:30:
53:54:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:50 2026 by rpki-client