Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 3s8GyVMw3ZVnXgt5cpdojUCJug4p0R7SjX6/wktv7NE=
Subject key identifier: 7D:AF:36:5C:BF:F9:1F:03:C0:64:CA:27:18:48:E9:A2:1E:C8:64:16
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019D29CE0A19739A95238DA5DEAA368FE5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 11:01:02 +0000
Manifest this update: Thu 26 Mar 2026 11:01:02 +0000
Manifest next update: Fri 27 Mar 2026 11:01:02 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: XTbOuqaskHBH4yPc274+gN17mFM7nIu+F64w7IPCz/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:0a:19:73:9a:95:23:8d:a5:de:aa:36:8f:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Mar 26 11:01:02 2026 GMT
Not After : Mar 27 11:01:02 2026 GMT
Subject: CN=7daf365cbff91f03c064ca271848e9a21ec86416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d1:40:cc:2e:3e:38:0c:18:38:1b:0b:2d:a5:
2c:b5:a3:41:ac:4a:87:ab:a1:47:8d:49:19:63:6a:
e0:28:ff:64:e7:89:ef:3e:6e:92:66:f1:26:28:42:
88:91:1a:56:50:76:60:c4:f5:4a:56:06:54:4a:5f:
52:1d:7a:44:58:61:5f:b8:86:16:d4:30:bd:8e:57:
0c:57:2d:71:26:21:b3:f1:fa:2b:9f:10:c9:27:d5:
04:4e:83:22:ce:5c:3f:d3:a1:39:db:4f:ef:5e:36:
97:f6:ac:50:04:aa:db:86:f7:0b:71:aa:91:bb:c9:
84:5a:03:62:22:13:d0:d7:f4:ce:0d:6b:73:4b:c8:
66:77:02:b3:c4:e2:cb:60:b5:9a:3e:66:3e:70:27:
bb:59:b0:e9:f8:42:19:de:4f:25:b6:54:55:70:cf:
bb:b2:ff:c7:b0:09:1e:24:80:3e:f5:d7:2b:46:45:
ba:44:47:02:be:89:88:75:ad:af:e6:44:1a:7d:32:
9f:57:cc:ff:46:da:05:47:99:28:65:db:93:ba:16:
50:bc:ac:c9:f2:c0:07:c2:3d:1d:39:98:bb:69:78:
6f:be:a6:b9:98:6d:02:c2:33:23:91:13:7c:0e:06:
ef:5b:57:be:56:ef:4c:5c:08:40:34:8b:7b:81:ca:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:36:5C:BF:F9:1F:03:C0:64:CA:27:18:48:E9:A2:1E:C8:64:16
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:14:3d:fa:1e:2d:f3:ed:e0:7e:92:3b:d9:9e:d9:1d:ad:
d7:d1:08:34:fe:6f:8e:d9:30:6e:da:5d:ae:5e:9b:33:2d:2e:
0e:c0:1a:f7:c9:e2:3b:1c:3e:f7:b3:0d:05:fa:6a:fb:8f:e8:
6c:d6:24:89:e2:cb:99:a4:4b:a1:57:b1:a8:2c:56:6e:ca:6b:
27:a5:03:5f:a7:73:3c:d2:41:70:54:f8:e8:56:78:2d:36:11:
1f:d1:c4:db:82:7c:64:e9:e9:0d:07:83:c6:ae:2c:d5:e6:df:
8b:9d:94:51:04:f8:b9:cd:24:ee:69:c9:69:68:c9:3a:c3:00:
56:dc:6b:29:bb:7b:17:61:41:9d:73:70:77:df:9d:57:f5:da:
9b:ee:28:d9:06:1f:88:f7:bf:35:55:36:d9:ca:46:21:53:33:
cc:5e:e6:64:c7:ec:86:25:28:db:b6:03:3e:3e:3d:91:b5:d9:
06:c4:1a:a8:e0:6d:a1:7e:06:1d:0f:7b:d6:4a:a5:0a:d6:7b:
c9:49:9d:34:c2:fd:8a:25:bf:53:39:1c:ba:30:d0:08:a6:75:
cb:c0:9d:0b:5d:8b:2b:46:56:0a:15:0d:df:a2:e9:b1:d0:7f:
ea:f1:b6:7d:86:6b:71:12:35:32:15:3a:cd:da:88:b7:eb:b5:
99:e3:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:03 2026 by rpki-client