Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: 1nBJx0yjhSlFRW5RAVAtgmDMiXqjuOLzx7obhAZhVi8=
Subject key identifier: 16:A0:2D:63:7B:79:93:B1:56:A8:75:A1:7D:CD:AC:F0:80:26:C3:22
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019D25F1CA8D115AB7D37F47FBA98412EE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1832
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: ZQN3iCkWdvZOjuUU4/C6wi3kRVgudO4M9g81UgPGAxU=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ca:8d:11:5a:b7:d3:7f:47:fb:a9:84:12:ee:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=16a02d637b7993b156a875a17dcdacf08026c322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:2a:cf:55:51:81:e1:af:dd:f2:da:21:3c:
fb:b7:70:78:aa:2b:4b:fc:6f:b8:85:98:93:f7:dd:
60:ac:97:26:7d:7e:52:04:87:31:1a:fb:03:59:51:
a7:e5:bc:21:cf:f7:20:94:70:a7:c3:d6:9d:d5:5a:
f0:ac:01:04:7c:fe:55:15:df:cb:dc:27:c1:c1:0b:
66:0f:8f:f8:49:45:0a:a8:5e:58:9f:6d:04:11:d6:
b9:e9:88:46:63:ea:24:50:9f:77:2e:ec:8e:19:c8:
86:0a:8b:e5:fe:36:8b:b4:42:8c:ad:54:e4:9d:b0:
73:83:8a:d4:dc:32:75:ab:51:4e:9c:5a:1e:63:5a:
57:8f:79:eb:3a:8e:49:98:06:d8:a2:43:d7:1c:7d:
42:b1:90:34:35:73:05:b6:7f:e8:ad:05:fa:0c:93:
39:5c:b5:52:84:e7:5d:4f:be:11:b0:38:1f:f4:36:
8f:c4:30:a0:1f:8d:aa:2b:dd:0f:c7:9d:1d:18:42:
f2:da:5a:70:17:b3:ed:e7:1c:9f:68:c0:c9:5d:c3:
27:9a:6c:7d:2e:d7:01:f7:09:aa:2e:4f:e7:92:38:
2f:aa:27:f0:35:d8:6c:89:5d:c0:6c:b4:3f:97:a2:
31:4c:56:50:c6:b6:1b:14:be:a0:ee:c2:41:7c:1a:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:2D:63:7B:79:93:B1:56:A8:75:A1:7D:CD:AC:F0:80:26:C3:22
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:bb:4e:53:60:34:ff:9d:25:2c:57:03:d4:61:3d:b2:08:
b9:42:91:d0:a3:4f:e9:3d:a6:ec:45:d2:79:27:ab:fd:1e:0a:
9a:32:af:86:97:09:e1:89:e3:62:3f:43:34:a9:a0:b9:7f:c0:
f4:ed:73:bf:05:35:e3:c3:10:d9:e4:ca:24:ea:d4:d1:97:01:
fb:c8:c7:c4:4d:cb:78:95:07:ae:65:d2:09:b8:c3:33:6a:ee:
ce:15:60:22:bf:bf:8f:30:64:2e:14:5e:87:35:2c:ed:29:66:
3f:f4:22:bc:48:80:d1:88:c3:48:0c:d4:45:f0:3e:f8:a8:a5:
4e:d6:5b:0e:a5:d0:b9:1f:2f:89:c0:bb:bd:5b:ca:44:02:1d:
41:74:2e:76:60:22:37:91:cc:2e:a0:f7:19:c6:6c:6d:72:76:
9a:43:c0:a2:d2:a5:02:88:8e:b8:56:11:cc:ea:fb:d2:c2:0e:
d7:ee:0c:8c:68:a7:90:de:1e:7a:24:88:03:f5:12:80:f6:51:
16:6b:f8:20:90:d5:12:57:72:9c:b7:37:2e:da:4b:86:f6:4f:
71:f4:bd:35:7c:35:ad:27:aa:91:8a:3c:01:10:23:27:ed:48:
f9:a4:e6:96:c9:b8:d6:8c:38:91:59:90:2c:26:cf:ff:1e:3d:
c6:49:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:04 2026 by rpki-client