Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: to6xwGMOMAz9lO/V0gcPvNXw7S0FTUZFkMRP6Wq6G6E=
Subject key identifier: BD:0C:15:77:B3:05:D2:4E:E7:EE:D1:56:86:DC:20:5A:28:20:B3:17
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019D27A8A8D2780E3ABF40E6270C24D279A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: gyT8VVB9VTpPdR91wMCl1whXdsmvvZFanahWOtwLPLk=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a8:d2:78:0e:3a:bf:40:e6:27:0c:24:d2:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=bd0c1577b305d24ee7eed15686dc205a2820b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:a1:17:c7:bd:56:a6:a1:73:d9:f1:7b:c8:
58:a2:68:ce:b4:aa:d5:4f:bd:7e:b5:74:b0:d8:c0:
7b:79:e0:67:4c:93:27:f9:1c:cd:20:3b:5e:8e:0a:
ad:76:de:8a:ac:5a:83:34:d6:07:69:ab:ec:dc:0c:
dc:7e:27:53:d1:d1:4b:35:d1:89:11:0e:8d:60:56:
c8:8b:4b:b0:93:a5:d5:7f:4a:28:7a:eb:f9:41:73:
1b:f6:71:1c:fb:4b:f7:5e:73:79:a4:42:85:94:4d:
9f:40:4a:74:30:15:02:54:b9:75:57:07:53:0c:ff:
0f:57:0a:8d:b3:08:b8:8c:d8:72:df:7b:fd:24:a2:
2d:b6:52:ae:1c:38:f6:43:25:7e:82:b6:90:5f:b4:
f5:17:a2:e1:cb:a7:eb:ff:05:56:9d:54:c3:07:8c:
00:fc:b0:50:b7:b3:bf:f3:89:7c:6f:af:3c:55:a9:
b4:0a:d8:87:4b:06:2d:88:bd:2a:1b:79:db:66:d5:
83:84:06:06:a3:21:fc:69:96:7b:6b:ed:46:9f:a2:
fe:20:59:91:e0:12:ee:80:dc:51:e1:b2:77:1d:14:
ce:cd:ea:36:79:aa:cb:fd:9f:67:12:89:2c:14:0c:
e6:18:0b:9d:cd:2c:97:0f:c5:35:2b:2e:a6:39:a4:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:15:77:B3:05:D2:4E:E7:EE:D1:56:86:DC:20:5A:28:20:B3:17
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c2:68:e9:eb:01:84:36:5d:a8:32:a4:21:0a:b4:47:9e:d4:
a5:1d:64:d7:09:2a:ee:fa:a4:56:ed:e0:ed:8c:53:7a:b2:7a:
87:53:fb:02:ec:ef:1f:79:37:38:53:b3:51:28:a1:b1:d8:b4:
2f:44:96:66:84:c3:95:95:45:81:aa:77:f5:a7:44:7c:e7:2c:
5a:5f:78:82:ef:82:71:72:84:98:fd:ea:bd:0c:d7:79:22:c4:
87:8d:83:91:af:ca:16:eb:14:be:46:72:4c:14:ff:23:7a:f3:
09:33:35:19:e9:1c:ec:d6:45:9a:4f:e1:7d:61:c3:8c:5c:19:
6d:8d:e2:44:79:ba:53:5f:69:2f:8d:b3:6d:b7:a8:64:64:08:
db:7e:64:c3:09:79:e0:20:6b:15:a7:35:9d:cc:f9:2a:a3:07:
d5:ac:1b:e9:4c:b5:81:79:61:14:d9:46:3c:32:4a:60:fd:dc:
f6:98:68:5f:b6:53:d9:fe:4b:84:2d:6f:4d:85:23:07:39:8e:
45:f1:f6:11:84:37:04:90:d0:91:e4:cb:de:66:f1:0c:85:97:
23:44:86:c1:c2:43:07:d2:d4:f4:83:3b:c0:62:6b:59:e0:56:
36:1b:cd:14:e0:e8:9b:ea:34:e1:f6:86:dd:67:c7:a7:4e:26:
df:a6:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:57 2026 by rpki-client