Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: IMwT7WGnfUADqbMqNTqaTXq0b7zyFwizyJXjh2XquX8=
Subject key identifier: 3C:AB:A0:B8:1B:8C:1F:EB:9F:9F:4D:7E:BA:AD:96:AE:69:D8:31:13
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 019D2AE1306216959ACA949F552B2A20ED14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 16:01:34 +0000
Manifest this update: Thu 26 Mar 2026 16:01:34 +0000
Manifest next update: Fri 27 Mar 2026 16:01:34 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: GDIV6qANSYMRFWNDknIVhZ6PsVgds+XazwaAYKGleT0=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:30:62:16:95:9a:ca:94:9f:55:2b:2a:20:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Mar 26 16:01:34 2026 GMT
Not After : Mar 27 16:01:34 2026 GMT
Subject: CN=3caba0b81b8c1feb9f9f4d7ebaad96ae69d83113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:24:10:b9:1a:64:15:c0:97:69:c6:2b:16:
b8:36:ba:32:a8:33:d8:1c:d7:36:ae:bd:13:3b:41:
89:b7:a4:89:cf:30:38:a6:49:55:f7:91:43:2f:e6:
88:15:71:a8:be:aa:5f:35:9c:fb:98:f8:86:bb:68:
1d:47:66:e0:e3:2f:9b:57:2c:00:b2:79:47:45:4e:
23:b2:ff:4d:ef:b4:0b:90:f9:91:91:f0:a8:4c:f6:
25:dd:30:05:af:99:96:db:82:07:d0:0f:85:b5:66:
67:c7:95:e3:b5:2d:3c:c5:25:e8:12:5b:bd:8c:dd:
52:cd:f9:00:d4:07:48:b2:f0:66:20:00:e7:2d:bb:
c4:8d:25:9c:28:91:79:7c:d7:6c:6f:67:37:ec:d6:
c2:8f:eb:72:83:03:6b:59:13:94:5c:f1:b0:76:9e:
0c:52:96:1e:86:f8:83:aa:99:53:81:a7:6e:de:5f:
06:a0:cf:ce:4c:ac:b2:dc:5b:a2:6b:bf:cf:db:85:
77:10:45:61:c9:9c:9a:4b:1a:db:d7:9d:22:f4:18:
fd:23:34:25:65:72:dc:d0:35:c5:cd:3d:af:e1:10:
8b:9f:30:3c:99:cc:4b:33:6c:46:55:5b:c3:2b:af:
1d:f2:66:d6:88:b0:79:47:64:f4:ac:a9:98:db:30:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:A0:B8:1B:8C:1F:EB:9F:9F:4D:7E:BA:AD:96:AE:69:D8:31:13
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:29:f4:b3:6d:f5:1d:13:87:81:35:23:15:f5:48:88:84:25:
74:d7:65:68:c1:8e:9b:f3:dd:2b:40:84:20:e2:6c:04:4d:66:
02:fc:20:8f:22:13:9b:27:ed:11:72:eb:16:92:c6:b5:0b:37:
8e:c2:63:a1:a7:bc:aa:18:49:d3:f4:0e:e8:62:1c:41:5c:98:
a3:35:2d:29:b8:3a:21:24:e6:f0:e0:62:98:0f:3d:3c:28:91:
8a:2a:3f:af:01:96:e9:53:ac:84:a1:9e:0c:83:a4:d8:e0:48:
11:ee:55:89:e1:33:c5:d1:8f:ef:5e:7e:16:9c:76:fb:fa:85:
d2:b1:72:02:f5:ac:3f:99:a9:3b:85:b2:57:bb:78:56:99:a8:
3b:0d:0b:d7:94:f7:b5:60:bf:a3:65:e9:bb:6b:ca:09:ea:f5:
83:05:6d:a7:a2:5a:da:cf:6c:0f:f3:92:4a:74:eb:17:53:d2:
72:83:87:ae:16:66:a4:2c:2c:52:a9:93:34:ec:43:c7:51:81:
5a:a5:c1:25:4c:03:5b:04:cf:95:4b:e4:cc:7a:fe:99:f6:6a:
7a:55:03:8a:f8:7e:76:c4:19:38:39:ce:56:fd:d3:63:58:8f:
88:43:62:b0:94:35:97:d1:24:f5:f4:7d:87:d0:6b:f3:13:6e:
02:ef:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:59 2026 by rpki-client