Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: C84qhCFjGtAerwximYogZFPEdAttPsO1Aw3EZjlaZeQ=
Subject key identifier: 24:6D:33:15:D5:48:61:ED:9C:D7:AA:B6:3A:A7:66:4E:2E:CF:72:4F
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 019D29292B27AD41FAE3B0D6F886B8DD2F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: 4FPCz3/JfLqnEnt1SkosUW0syBZE79D1eG/MX0IPBqE=)
2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2b:27:ad:41:fa:e3:b0:d6:f8:86:b8:dd:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=246d3315d54861ed9cd7aab63aa7664e2ecf724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:69:f9:50:aa:39:4e:f1:ae:f3:b0:aa:dd:
07:5c:b1:ac:52:c9:a0:b6:28:78:b7:72:cc:8f:11:
56:80:79:c6:bb:f4:cf:74:5a:3c:99:e7:ab:c1:d8:
77:42:95:90:0b:44:d2:bd:61:e0:69:fd:94:5a:80:
71:1d:ad:89:29:02:97:d4:7d:1d:e4:3c:b9:6c:b5:
06:37:9d:01:a3:b7:05:7b:a2:67:2d:a8:17:4f:e5:
12:32:ca:bb:2f:d8:71:26:ec:9a:1c:f5:44:0b:19:
8f:b1:5c:1a:30:cd:fc:03:03:e1:f9:d2:25:4d:f3:
44:a4:49:ee:c5:4a:b5:ef:f9:6f:af:1c:11:1e:f3:
c7:fa:27:b2:0d:94:39:ab:f0:b2:a3:02:0e:50:e7:
e5:69:29:a9:d8:53:91:c2:ba:75:22:5f:d9:06:da:
df:0d:9a:9c:b5:d4:57:98:1a:79:8c:b7:c9:ac:3e:
57:a6:69:86:9c:1d:41:9d:2b:9f:78:2b:41:f7:c3:
8b:33:25:49:e9:5a:80:a1:8a:0c:20:61:cf:e7:95:
05:db:24:31:dc:63:b2:c4:e8:5e:df:11:63:4e:ab:
d4:0c:da:d2:0e:4c:8c:9f:9d:5a:f3:58:da:88:82:
f0:a3:9d:ed:86:f3:0f:2d:1c:2f:60:2d:bd:67:17:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6D:33:15:D5:48:61:ED:9C:D7:AA:B6:3A:A7:66:4E:2E:CF:72:4F
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e2:58:3c:27:27:ce:02:d7:80:15:3f:0d:74:fc:c4:3c:75:
e5:2a:cf:b5:2c:ea:0c:37:25:b6:b8:6b:cb:b6:38:06:37:9b:
82:32:38:86:f6:dd:78:3a:2d:8d:e1:f7:41:66:9c:40:34:a4:
dc:eb:94:1d:a8:f7:cc:7c:25:fc:4f:72:3a:f2:9a:98:f7:46:
2d:0b:63:8a:ef:99:12:35:92:cc:ab:23:30:d0:21:f4:d8:cf:
cb:b2:a5:24:81:9e:2a:f6:2e:82:1b:e5:b6:30:a4:38:de:7c:
f5:b7:a4:5c:a9:67:a7:27:16:c9:d2:8a:5b:fc:da:fa:ef:7c:
45:52:5f:c2:4d:38:33:31:f3:9f:50:65:75:59:56:a3:7b:0a:
64:c1:89:47:3e:6f:6f:9e:ca:3c:20:64:79:d3:7e:b5:5c:1b:
a2:e8:6d:38:b4:b1:34:98:a9:76:4e:88:66:82:3e:4e:35:37:
67:21:47:12:a0:a8:c2:9a:ce:34:ca:3e:6f:b1:a1:79:07:68:
f8:56:ec:74:87:06:19:19:06:ac:aa:61:90:61:64:a1:dd:23:
58:0f:81:0b:f2:a0:dc:4e:b2:0f:d4:5d:43:f9:25:2b:58:e0:
f0:e0:34:89:06:d1:e6:2b:a7:61:59:f2:c1:e1:70:d4:34:15:
d3:59:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:24 2026 by rpki-client