Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier: 0LvZEwNPs7O+tEwFMhos2NBi0sVosOdhbrcxmTWcqvs=
Subject key identifier: 03:00:FA:06:D3:A8:B8:B4:28:12:75:75:CF:E2:97:6B:E2:B6:3D:3C
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial: 019D2A3C2EA816D94AA443F1B5098E93481A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:01:20 +0000
Manifest this update: Thu 26 Mar 2026 13:01:20 +0000
Manifest next update: Fri 27 Mar 2026 13:01:20 +0000
Files and hashes: 1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: C+HnLnOrTCaO5Wnakq6flsgOXJzXsH975sqeBHIseIA=)
2: s3A2C1YnSyHhxEfVoTVMiH87vAk.roa (hash: MNg/HtGNSEAU6JM2GvPKlMX0wCyEJFk2vuXxUMALprU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2e:a8:16:d9:4a:a4:43:f1:b5:09:8e:93:48:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
Validity
Not Before: Mar 26 13:01:20 2026 GMT
Not After : Mar 27 13:01:20 2026 GMT
Subject: CN=0300fa06d3a8b8b428127575cfe2976be2b63d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:f2:77:4a:eb:23:86:88:9a:ec:e8:63:04:
d2:a9:5a:d5:3a:ae:c8:65:50:ea:59:61:86:b1:8d:
03:a3:61:2c:ea:e6:5d:84:c2:32:42:26:17:a2:b5:
25:3e:0e:f1:f5:e4:91:2e:5a:a2:ea:07:32:1c:34:
37:9f:ec:09:9a:3a:ef:92:f1:ac:c7:f7:f2:86:89:
fa:5b:85:eb:e6:32:fa:45:d9:83:0a:b1:55:91:e4:
03:44:68:9e:fc:64:d9:b1:5c:92:86:43:53:3e:cc:
d7:30:1e:1b:65:da:ff:40:ef:ad:58:55:eb:1a:07:
76:05:b1:3f:5c:2e:52:36:79:ec:6d:48:11:e1:c4:
50:f9:86:0d:46:97:d7:2b:58:49:22:85:46:e5:91:
1b:9e:ed:2d:50:81:be:b0:bb:31:37:76:8d:6d:7a:
0a:96:f2:ac:c4:9f:74:2e:65:fa:ed:d7:3d:57:2f:
d4:1b:ba:5c:cc:a9:f3:ef:4e:76:1d:4c:31:91:4e:
2a:36:4e:e7:16:66:93:e2:eb:2b:b0:65:31:fb:c8:
e5:cd:60:c6:bc:4f:68:25:28:61:2b:e8:9a:84:bf:
7d:09:80:5c:50:5b:72:0e:6f:d9:cc:e9:fa:3d:94:
13:00:3e:9b:d3:a0:2c:e4:cf:31:ab:c6:16:4c:ae:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:FA:06:D3:A8:B8:B4:28:12:75:75:CF:E2:97:6B:E2:B6:3D:3C
X509v3 Authority Key Identifier:
keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a1:81:6d:73:4e:ea:82:12:cb:c2:1d:e0:41:61:53:c5:b0:
9b:59:69:10:04:eb:20:ee:af:4e:a2:cd:92:9d:e7:ef:08:b1:
a4:fc:32:bc:40:2d:e7:e8:78:37:50:21:33:d6:9a:28:e7:0f:
7b:11:d2:c7:6c:3d:a4:96:ce:67:f2:28:ad:61:c8:8f:fa:00:
e1:8c:4f:bb:4f:e4:3b:bd:ab:8e:c7:f4:a7:7a:cf:08:7f:2e:
60:6e:a9:6f:90:c7:a3:73:32:2e:cc:44:3c:a6:b9:78:b4:ca:
7e:29:26:fd:3a:ee:e1:cc:d1:e0:89:d6:ae:9b:e1:bf:4d:dc:
4b:68:94:ff:37:15:2f:11:4d:d3:04:3a:32:06:49:cc:3d:b5:
f7:5e:4b:a1:4e:5d:64:2f:08:d8:bb:32:9a:17:39:4e:54:6f:
27:a6:ef:2a:59:75:74:97:51:90:4c:96:ca:68:18:a1:9e:b1:
ec:e3:68:97:91:2c:cd:90:d3:c4:74:76:26:54:38:4e:08:6f:
ae:bf:c7:73:42:4e:a2:68:ba:9a:09:96:26:f6:5a:5d:eb:05:
56:e5:4c:59:b4:d8:8f:36:6a:0f:f4:3b:d4:f0:c2:ce:96:a2:
c4:dd:5b:3d:f3:9c:01:44:a6:5d:fb:1b:57:03:c7:5c:ee:14:
e6:8c:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:23 2026 by rpki-client