Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: qhvfcQLxMiRIoWx4zYIP98nUGc+J1UrO8Ib2Wi3Hz5E=
Subject key identifier: 56:68:0A:F1:C9:87:E2:35:9D:EF:30:05:6F:7D:FD:F4:75:F1:1E:A2
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019D28F2EFAE54AB7630D09BF0F887FBF913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:01:42 +0000
Manifest this update: Thu 26 Mar 2026 07:01:42 +0000
Manifest next update: Fri 27 Mar 2026 07:01:42 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: sJ43ie6fxTBwrhbz5nyLnxNB8Ma4fHJMBaKSLyFkFag=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ef:ae:54:ab:76:30:d0:9b:f0:f8:87:fb:f9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Mar 26 07:01:42 2026 GMT
Not After : Mar 27 07:01:42 2026 GMT
Subject: CN=56680af1c987e2359def30056f7dfdf475f11ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:ba:7a:00:48:1d:1b:5c:b9:d4:b5:02:d8:
3f:78:9f:77:df:b4:32:8a:dd:03:af:fd:0e:32:4d:
05:e2:1d:17:f4:d1:75:2b:43:a4:ec:64:8d:c6:8b:
0d:e3:46:3a:f9:e8:5f:e3:eb:30:ad:52:ab:ec:f8:
97:1c:9d:3c:c4:c3:91:93:f9:63:52:70:2c:fe:eb:
b3:83:58:69:24:49:5b:b1:9c:7d:17:6b:01:02:15:
86:11:b3:20:18:30:60:db:59:70:f7:59:7b:b3:7c:
cb:c5:05:6c:f1:17:ba:69:97:55:9c:74:ed:4a:57:
1d:97:64:56:07:8f:96:9f:37:6d:3f:aa:92:79:f7:
5d:44:f1:a9:7b:8c:64:6a:9d:3d:9d:a7:45:d7:6c:
d0:da:73:2f:86:1c:17:af:4f:ed:14:93:bf:2e:bf:
06:fe:ee:d0:85:f1:c7:ea:62:a6:c9:6e:4f:08:a1:
33:02:a6:5c:2b:84:21:8f:77:fe:15:13:a8:b2:ff:
f9:a3:d0:6e:7e:b5:f7:a3:30:9a:03:0d:de:f9:81:
3f:41:2b:99:f9:3a:c9:98:9d:68:54:a8:21:20:f4:
d2:d2:bc:05:07:fa:b9:91:93:a7:58:80:c5:17:fc:
9f:26:e4:86:0c:7a:6a:97:6f:35:02:89:19:b9:75:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:0A:F1:C9:87:E2:35:9D:EF:30:05:6F:7D:FD:F4:75:F1:1E:A2
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:ac:c8:c5:a2:14:22:5c:53:e4:cd:a0:d8:8a:06:f8:bd:
cb:60:b7:b6:de:45:98:58:1b:5a:36:0b:16:ff:24:83:b5:71:
1b:4c:78:53:89:4c:62:7b:80:7b:3d:48:c7:34:8b:73:70:c3:
d4:f2:a8:f9:55:23:01:d8:2a:1e:ed:c5:07:49:c0:94:75:bf:
bf:2a:ce:51:6b:e2:5b:f6:77:0a:05:5e:ef:39:e6:d3:c7:d2:
cf:c8:f9:b1:8d:3a:9e:b0:7c:6a:a6:2c:62:82:6a:55:67:8c:
f3:6b:a1:78:97:c7:1d:4d:76:2b:41:64:33:71:90:30:7e:f5:
3b:12:aa:a9:d8:2a:91:66:d0:69:98:2f:41:5a:f6:77:b0:20:
35:86:9c:08:0b:df:6b:b1:68:06:dd:ea:e6:b0:df:e5:1a:2e:
c0:61:41:be:56:a6:f2:b8:6d:80:50:23:f5:b4:2f:71:01:1f:
44:d8:06:a2:16:ac:d3:a1:7f:ad:b9:27:46:bf:e8:39:a9:5b:
20:3f:3a:cc:1e:00:dc:6f:28:0d:bf:ff:94:78:13:2a:23:c7:
63:0e:f9:6b:d1:34:59:5a:65:19:f6:2d:9f:b9:7f:81:59:da:
eb:e9:bf:7e:fa:d4:be:8f:e5:f8:0d:c7:2e:37:4b:6f:ae:79:
7c:a5:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:42 2026 by rpki-client