Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: CtrsWsC8EHPAy/kIkR98cfIzz8oKqT7hkdvf3c/T/s0=
Subject key identifier: 62:17:B2:CA:27:E7:AD:21:3E:A6:FD:52:91:36:61:35:7C:CE:91:44
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019D299792C8F0E2BF0FADC8D3F46A6D3574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:32 +0000
Manifest this update: Thu 26 Mar 2026 10:01:32 +0000
Manifest next update: Fri 27 Mar 2026 10:01:32 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: yNzCINkQRd+K2KDh0Il/7AMHOslD9QqXoF5+8esGDz8=)
2: cny5YunWoGOPcvtGZLymBoSxvc0.roa (hash: z2k+kuA2gEPwCUj1PQs/NjdvAeEDMEfFxUJYpvTthlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:92:c8:f0:e2:bf:0f:ad:c8:d3:f4:6a:6d:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Mar 26 10:01:32 2026 GMT
Not After : Mar 27 10:01:32 2026 GMT
Subject: CN=6217b2ca27e7ad213ea6fd52913661357cce9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:19:69:1d:90:e4:d6:e2:31:14:d6:6c:71:82:
2c:24:9b:f5:0e:58:20:51:c1:7f:a9:bc:7a:1e:53:
24:29:53:5c:b9:71:f8:a9:95:3f:9b:cd:2a:d4:cf:
91:10:4f:4f:f8:79:f2:97:48:d5:6c:93:02:5d:9a:
41:f8:a2:b9:f4:3a:27:31:b9:71:66:0e:ba:a2:6a:
70:1d:aa:a4:ea:d1:3f:45:21:77:2f:5c:83:7e:9b:
b2:90:99:eb:b5:f0:1e:dc:d8:68:bb:01:bf:20:f2:
07:bc:1f:33:39:7c:c0:cb:7c:6e:32:b6:32:4f:8a:
73:99:24:a6:a8:dc:31:13:44:a2:99:44:1f:c2:c3:
d3:80:92:cb:b3:c8:6f:39:04:0e:1a:58:ff:7c:4f:
0f:1d:5a:b8:54:7f:11:bd:60:b3:98:d1:26:ae:46:
40:4d:f0:65:47:d1:15:55:cd:a5:2f:79:95:aa:fb:
93:a7:fd:7a:be:ef:65:11:59:85:66:57:f4:f9:66:
d7:76:a3:cf:72:8a:03:f1:00:e8:75:e6:7b:a3:e1:
c1:fb:7e:90:f8:76:c4:62:7a:e3:40:55:73:9f:cb:
a2:b7:38:56:43:0c:00:9a:76:03:d0:95:26:a2:d5:
ab:c6:3d:77:84:f1:73:5a:62:91:45:b1:a7:d3:60:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:B2:CA:27:E7:AD:21:3E:A6:FD:52:91:36:61:35:7C:CE:91:44
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:db:14:ae:58:e1:29:8d:cc:1b:92:ca:99:75:f3:21:cb:
4d:20:19:79:3a:7a:f8:48:90:dc:4d:5a:67:5c:57:e6:db:42:
00:c2:88:c7:92:df:56:40:73:86:2e:2a:38:ef:db:ba:dc:72:
af:39:af:15:a8:e3:b9:1f:0b:9e:38:6b:7f:05:1e:68:7d:73:
06:d4:b8:09:b5:97:c2:6d:54:55:d3:2a:7a:2d:75:e2:d8:f2:
00:dd:bb:17:c5:25:f5:11:cd:9e:ed:15:ce:0d:a6:04:28:96:
54:9b:07:ef:c1:ae:06:e9:d0:5d:45:b2:15:8e:87:01:f3:60:
a1:81:3d:39:93:7d:63:2a:d3:39:69:df:8d:43:63:a7:d5:33:
74:4f:35:4b:6e:5d:b4:b3:03:61:33:23:69:10:d9:90:fd:b9:
cb:98:db:e4:11:69:d1:92:f3:1f:1b:99:fa:bf:2a:4c:19:a8:
79:ac:91:fd:6d:a7:45:7d:2e:ea:4f:c4:4e:ec:95:58:67:4b:
5b:9c:2b:bd:1d:a4:8a:c5:1e:ad:64:e0:cd:1c:74:6b:40:ec:
a4:d3:a3:cf:9f:97:35:50:6c:cc:b1:01:a5:49:4b:84:64:1c:
83:ff:89:81:09:93:be:2b:bb:4e:d3:e7:e8:0a:1d:32:4d:ec:
61:2c:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:51 2026 by rpki-client