Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: XP0ShWjPaA4B8OTid7iJa7/47E+IgUzM7/RtgqqMIik=
Subject key identifier: 37:1C:0A:3D:88:D7:EB:A2:50:64:EE:B6:A8:D2:71:17:AE:62:7C:82
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019D265F63608F4E56ABE0916D2048B90E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: aJdxnz3eIlJQNbbgUCNnNIaZDkpxPNIY831Yi3lqpEQ=)
2: gPlEqEZzfnSTUwltcGMsedRBQ1E.roa (hash: 38esTkQDBO03GfM8yJINP0QbftSi3sYtaXAqJp+R6Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:63:60:8f:4e:56:ab:e0:91:6d:20:48:b9:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=371c0a3d88d7eba25064eeb6a8d27117ae627c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:78:d8:a3:5f:c7:44:d3:4e:5b:00:08:a6:
1e:92:ba:c3:b8:8d:c6:c0:20:20:d4:88:a9:ca:fa:
de:a9:1b:00:03:a7:83:7f:76:e9:02:77:42:ed:e0:
73:71:e5:75:31:79:16:56:17:cf:4e:b0:e0:d7:a3:
9f:ba:d5:9f:dd:a6:82:d6:aa:da:bc:2b:e0:0e:29:
03:dc:57:75:47:21:5c:db:08:56:d3:fe:71:b0:48:
64:56:d4:7e:5b:0c:51:e5:4d:31:08:ea:c3:77:2c:
f2:99:26:38:20:24:4d:23:87:b9:ab:76:11:86:65:
59:50:7a:fe:31:6e:50:00:b1:24:a5:94:78:35:be:
97:53:f7:e1:5b:3c:72:45:f5:67:66:8f:a2:b9:96:
55:b1:5f:d5:8c:61:d1:37:a4:f0:8c:5d:6c:f8:fd:
ae:94:64:7f:2e:9d:60:eb:39:e5:f0:a0:b5:1d:5a:
be:0e:45:9a:d7:5c:db:ee:6d:81:7f:29:a9:29:ee:
d6:b4:92:bf:16:c3:6a:e5:79:65:4c:a3:40:53:6f:
ac:f0:86:33:36:e0:ab:7d:5b:02:68:55:29:9a:36:
f6:f7:7c:cd:5e:2a:d3:a7:61:b7:0a:dd:24:d1:01:
b4:f4:a5:d6:ff:75:5a:97:1f:f1:2e:43:b0:dd:dc:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:0A:3D:88:D7:EB:A2:50:64:EE:B6:A8:D2:71:17:AE:62:7C:82
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fe:cf:bd:74:52:4e:82:d4:dd:3a:a9:3e:70:60:9a:36:c0:
b7:32:b4:59:2d:53:0b:b0:38:7d:3e:3b:9d:15:99:14:2c:c0:
86:f2:e0:ec:1f:22:60:7a:71:61:5a:d5:5f:3a:b9:73:a5:29:
79:c1:3c:fd:18:63:34:94:6e:dd:8a:99:ce:d5:75:62:10:1e:
94:f4:af:f2:51:68:2e:c8:b9:9c:73:ce:57:6c:cf:cf:c3:26:
06:86:73:03:e1:66:7f:99:b3:e5:ba:3f:1d:d1:5f:3f:0a:17:
f7:1b:ed:db:2f:4e:70:54:cc:65:03:fb:6a:eb:3c:7e:0f:3a:
44:8f:92:40:e7:35:2c:5e:ae:52:74:14:f7:9c:07:70:83:99:
cc:3d:82:81:69:79:70:b6:31:1f:74:b3:da:cd:5f:e7:c7:1a:
03:f4:b4:fb:4c:3e:14:18:4f:d8:e3:27:d3:c7:9b:c6:54:bc:
9d:ce:a1:d4:73:9e:6f:02:0d:df:da:82:0c:80:9f:83:b6:07:
14:e3:33:7c:ac:20:92:ff:f8:ac:39:bc:a6:d9:35:73:e3:20:
a7:10:68:59:0d:20:60:71:0e:3c:55:a6:f5:3d:9c:0d:24:9c:
d8:a7:ca:4e:60:03:5b:81:89:ed:94:bd:79:e9:c1:ad:35:76:
c8:7e:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:44 2026 by rpki-client