Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: ZyjgtEotm32pce0G7p3xSbRULGRgx7ZNrwZhxGhP2jE=
Subject key identifier: B4:94:EB:47:E7:1A:ED:AF:11:61:75:01:C0:36:DA:C4:D0:BB:DB:AA
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019D269602B3CF16236E26ACBC5C225E60B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: Lk7U9GJWJl58dKPm57JmRhY7xR5vR1nnMj3Bkk5Pezg=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:02:b3:cf:16:23:6e:26:ac:bc:5c:22:5e:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=b494eb47e71aedaf11617501c036dac4d0bbdbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:f5:d2:0c:b8:6f:08:c4:b1:17:41:dd:ff:
4f:ab:0b:0e:92:9e:60:98:fa:af:22:2e:5c:14:9b:
e9:90:66:c2:c4:7b:ba:44:33:82:6b:be:c1:c5:1f:
d1:16:80:38:23:49:3a:2e:97:c6:ce:f3:29:07:1d:
5c:58:ae:75:67:fa:9c:8d:f9:44:d1:d5:42:f6:30:
e2:84:d3:7b:ea:2f:e8:57:c7:f4:b8:4f:92:73:44:
2e:9c:04:9f:9d:8b:96:f9:0d:e6:cf:f0:4b:90:40:
ed:83:f8:74:5d:7f:1a:5b:0c:2b:37:a8:96:0e:86:
d0:3c:86:60:75:fa:dd:ad:f3:ed:66:ce:15:df:ad:
2d:de:eb:c1:c1:ea:71:9d:36:f9:9e:0c:e6:1a:35:
ca:4e:f4:ba:d6:7c:cb:0e:17:3b:d4:66:df:9a:34:
f6:85:7d:b9:ec:99:ec:61:48:82:9d:40:73:e1:4e:
f0:30:fe:33:80:68:97:0e:67:c4:c2:e2:44:ca:f8:
74:8a:7e:24:d6:e1:3f:6e:e4:73:92:45:f1:1e:cd:
b2:06:05:4e:52:f7:e3:3c:fe:c0:d0:ab:a3:89:ea:
bc:2e:92:c2:5e:d1:56:c4:ee:d1:5d:9e:51:a9:94:
06:5c:15:bd:5e:fb:59:9f:45:ea:0c:c7:18:a7:0d:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:EB:47:E7:1A:ED:AF:11:61:75:01:C0:36:DA:C4:D0:BB:DB:AA
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:95:90:58:c5:c0:60:de:9e:81:a2:16:46:7a:e5:33:29:d5:
24:50:3a:cd:b1:a2:25:6a:6f:00:72:53:bb:1b:fc:93:21:6a:
47:0d:c7:51:25:08:6e:2f:2d:0f:be:8f:10:0d:3d:3a:ed:07:
b3:19:08:13:75:5b:86:fe:cd:d3:c2:88:74:a0:f6:a2:16:00:
17:fc:70:ed:6f:61:ae:7f:39:36:06:6b:59:5c:5c:d7:90:a0:
49:a2:d2:bc:70:f0:31:39:64:d6:c1:3d:42:bc:6e:c6:f6:29:
dd:c8:66:f3:91:7a:a7:22:82:7b:54:84:28:8a:db:86:6a:65:
3b:89:26:20:9f:b3:e6:12:b0:8d:de:b2:40:6d:7f:8d:2e:55:
5d:95:96:e5:76:8c:57:7e:fb:73:fa:72:4b:82:a0:ec:1b:3f:
c7:63:96:e9:54:f1:23:a7:a1:e7:cf:b5:23:b4:b1:81:39:13:
ee:f5:cc:4f:be:f9:f7:a4:43:1a:47:9c:bd:10:1e:e1:c0:13:
74:5a:85:1c:a6:5b:44:db:35:78:d9:10:df:a5:75:6e:87:5e:
75:29:2b:3c:b6:3d:df:10:0d:18:68:f0:14:a4:83:86:b6:88:
71:5d:76:f6:e2:61:ba:a7:88:81:29:1e:62:71:83:19:b2:01:
22:49:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:36 2026 by rpki-client