Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: TrcJcrdYOofMNkjxOPIuS6Q22RkTtRxwDK701RlSqXk=
Subject key identifier: 1C:DD:1D:E0:25:8B:81:B6:AC:A0:28:21:72:A0:90:4B:6E:EF:85:D0
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019D254CB03E7F39293DD92DF459A015D31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 14:01:15 +0000
Manifest this update: Wed 25 Mar 2026 14:01:15 +0000
Manifest next update: Thu 26 Mar 2026 14:01:15 +0000
Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: EYfXE/VeFhiuDxludU1TZjLadz2IjPQz5tU+GFZCGfE=)
2: JezjNTAfPbdlulCLBoO7mgYw2Y4.roa (hash: DSa6N96/QE2hXNxEFptm9KXCtFZ3HWg6uWKpBPavcuk=)
3: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=)
4: QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa (hash: 2V3XqNeNFd0SSJuJmBFBmno3apI+YcUhq7UgO9I7f4o=)
5: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
6: fhRyE_K269sQWrdJhqkhEA-v5ko.asa (hash: 9+eBnbSBimBu4HwMZ224XRHi7r8hcPQzKz3/KA+alHc=)
7: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
8: pPqoqszyNflAViMWi46ZOrZTdjY.roa (hash: 9ArEQlpDxpoMCJBHKPMxnNBFpsFnEVif2wzal4CkC4Y=)
9: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b0:3e:7f:39:29:3d:d9:2d:f4:59:a0:15:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Mar 25 14:01:15 2026 GMT
Not After : Mar 26 14:01:15 2026 GMT
Subject: CN=1cdd1de0258b81b6aca0282172a0904b6eef85d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:8c:66:34:f5:5e:f5:d4:e8:ba:be:9d:c5:
e0:fb:44:c7:9c:f8:a9:17:c9:05:73:9e:53:da:25:
88:25:eb:1d:3c:ff:0c:2c:32:71:b5:0a:b5:ec:b3:
f0:1c:85:bf:f3:24:49:f5:60:09:b1:91:75:25:52:
1b:40:ae:f6:43:75:7d:ac:72:51:b5:7c:ca:dd:0d:
78:46:99:44:5e:89:2e:40:dd:14:4f:36:1c:53:49:
ae:8f:64:a1:01:55:b0:a8:fa:9c:db:fc:7b:44:cd:
a0:5c:a7:df:2b:df:fb:95:2b:1b:24:f8:42:e1:bf:
a6:55:b6:70:30:c3:08:69:79:17:7b:d8:f5:0a:c5:
9a:ed:f9:8f:3c:67:d3:42:3b:d2:dd:37:33:a1:ab:
5c:9c:25:7f:51:b3:1c:e3:16:41:b9:57:98:59:ce:
6d:7c:4e:e4:f3:0b:aa:23:10:3f:ce:ce:1a:3e:d8:
ec:53:19:2b:28:10:30:ac:59:e7:ce:fb:03:ef:e9:
9c:50:25:d7:79:8a:7b:bc:0f:09:45:66:53:d4:3f:
ee:f1:46:2b:41:05:ae:21:11:12:a0:fc:4b:dd:6e:
d1:cf:7c:b7:81:d6:e4:9a:8a:5f:f9:73:48:eb:f7:
1e:70:b9:a4:ae:0b:e6:a0:ef:30:8e:e7:0a:f2:5c:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:1D:E0:25:8B:81:B6:AC:A0:28:21:72:A0:90:4B:6E:EF:85:D0
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:f3:ae:62:b4:23:c0:44:4b:58:41:ed:4d:45:1b:46:8c:
cb:55:85:01:80:c2:34:25:75:b1:fc:61:43:4e:23:0f:6b:dc:
e2:e0:4b:7c:68:69:5a:a6:5f:19:6c:8c:3e:03:c4:26:a3:78:
29:5c:a6:2e:74:8f:6d:13:bf:e9:ec:29:04:7a:8c:ff:d8:28:
ce:4a:a1:d5:ec:bd:51:e5:29:5e:1f:2a:57:f6:41:8e:0a:29:
12:6d:41:4b:9e:5d:1c:4a:f7:7d:ac:30:57:c2:68:8c:f7:ff:
03:88:62:06:16:fc:b9:0c:7a:5e:49:b4:3c:21:7b:45:b5:f7:
7d:25:43:d8:3d:22:22:77:cd:40:bb:0f:a4:39:e0:26:a0:df:
89:1a:49:63:22:62:6b:52:38:95:9a:ac:21:62:64:c8:be:c3:
83:c6:da:38:11:85:4d:6d:60:86:b2:39:c9:79:47:d4:ed:ef:
d7:6d:13:9c:36:91:03:c4:e3:50:73:f8:b7:10:95:95:0a:e4:
b6:0a:86:c9:38:5f:4b:2a:8e:60:a3:f4:cb:7c:2f:86:23:05:
1b:5b:1b:c1:79:03:09:b2:98:83:84:69:51:9b:37:72:12:14:
a7:8c:36:f6:51:24:0a:d6:95:a0:1d:72:53:4b:75:da:7c:d7:
95:53:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:09 2026 by rpki-client