Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: GGl6U79CadvhGisB4S8DNbX82NvnBOk+JzTwm2UE8ak=
Subject key identifier: 25:D0:74:A6:BA:AD:D1:09:AA:C3:89:3D:77:6F:13:DF:94:07:81:68
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019D27A8EEFAF8FDCA965675BD62C686D7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: qmysE3I/q+/nBx1WU7N9ww0bQFKuatn9z6uzI47Ljyk=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
3: SQYU9I8icjC1PnXxoUMPA7hZuuQ.roa (hash: os/3JTQZo5v32/YUHuB42SkbCkSG8rkSt1h0Yz40ENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ee:fa:f8:fd:ca:96:56:75:bd:62:c6:86:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=25d074a6baadd109aac3893d776f13df94078168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:37:49:e9:f2:90:e3:e8:8f:95:c2:0c:4c:3b:
3f:e2:af:7f:ea:90:5d:c3:3b:74:42:38:21:d5:91:
98:e6:53:db:24:74:17:04:b9:93:45:23:64:25:9e:
58:88:ba:63:7a:bd:6e:e5:97:89:b2:9e:88:65:ce:
9b:2b:9c:5f:55:ce:46:ba:36:9e:05:f4:7d:d7:36:
17:aa:fd:ee:6c:68:87:de:fd:e8:e0:5e:8f:2b:86:
2f:41:c3:96:1d:29:93:81:42:d9:78:71:2e:00:28:
e7:91:b1:0f:5b:73:be:b2:fd:cc:c7:95:b8:eb:cd:
c3:c1:cd:a1:d9:74:c2:59:da:53:f6:41:3d:e5:75:
45:71:45:41:3b:47:ac:83:66:46:43:38:b2:8b:c1:
5c:fc:6b:77:a1:3f:1d:8e:73:13:47:fa:cc:21:dc:
cb:e2:8d:52:85:48:28:1a:a9:01:93:b6:ee:c1:78:
05:07:f3:eb:ee:03:c1:e7:73:cc:ce:18:4a:f3:f7:
50:db:ff:af:46:1b:1a:46:36:f5:00:97:cf:3d:9e:
db:ae:b4:fa:46:04:fd:c3:08:57:d9:aa:de:cc:98:
e8:d9:24:2d:2d:9e:38:4f:db:a9:72:28:46:93:24:
d2:fa:2f:38:e6:b6:bd:b7:66:32:8d:5e:61:14:c9:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:74:A6:BA:AD:D1:09:AA:C3:89:3D:77:6F:13:DF:94:07:81:68
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:79:53:98:22:be:21:25:c3:90:ac:55:5d:c4:d7:f0:ce:61:
63:93:83:7a:f2:0a:9b:f0:fe:82:d3:aa:1c:e7:19:fc:78:c7:
c3:be:97:29:a5:51:09:50:da:9f:22:9b:b6:af:68:29:46:a7:
c1:d0:fc:0d:e8:c6:50:47:d4:32:7e:e0:3b:16:e4:30:f5:eb:
c1:80:dc:87:6b:2a:44:15:29:3c:5f:e7:62:83:a4:48:ee:66:
33:7c:63:2d:ae:65:17:ce:75:da:4f:87:5f:b6:9c:10:0a:88:
0e:24:e2:68:36:a8:42:ff:1c:ce:1c:67:cd:60:bf:4b:30:22:
bf:05:e6:9e:41:b8:20:ea:2f:2a:e0:f5:33:6c:cf:6d:eb:5f:
0e:8d:f5:3c:a6:a5:1a:b9:bb:5e:e0:8f:27:e5:dd:70:44:4e:
83:c6:1a:c7:f6:b6:12:e1:1f:ed:0a:66:70:e3:0f:f4:e7:15:
f1:88:db:be:75:ab:3c:17:3a:b2:3b:01:43:58:29:12:8a:2a:
4a:50:63:d4:f8:2d:44:a0:3b:a5:2a:55:16:8d:9b:a9:60:db:
d9:fd:1d:0b:8c:0b:c3:80:10:37:20:e4:23:ff:a2:71:16:2c:
a0:f9:32:41:68:88:42:dc:ab:0e:ac:d4:80:32:ad:82:ea:e4:
e7:c3:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:20:06 2026 by rpki-client