Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: FI+gt+KTuP+gvUgYItUOBa8I1FDsSU/Um8gQrknp1B0=
Subject key identifier: 8E:34:77:6B:74:F8:35:40:BA:77:1B:D4:59:85:7A:84:6D:C5:EB:E2
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 019D29292000C1E4E8A05EE21EFB2DAEC6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:54 +0000
Manifest this update: Thu 26 Mar 2026 08:00:54 +0000
Manifest next update: Fri 27 Mar 2026 08:00:54 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: VGB0RQyfTfpaNRkOfyTvn5aBYwspchavw3Xqxd4s6RM=)
2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:20:00:c1:e4:e8:a0:5e:e2:1e:fb:2d:ae:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Mar 26 08:00:54 2026 GMT
Not After : Mar 27 08:00:54 2026 GMT
Subject: CN=8e34776b74f83540ba771bd459857a846dc5ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:51:2c:a8:5b:a0:13:84:ce:dd:63:ac:61:
18:72:6b:f1:80:3a:3c:c9:0d:b8:c0:c6:9c:31:5e:
83:d7:37:e4:e4:6b:16:01:80:80:fe:cc:7d:8d:15:
b3:9a:2a:54:f9:c8:58:8f:2c:62:dc:99:c6:4b:9f:
6b:8e:14:c3:fa:0c:6d:dc:61:d6:37:48:db:1b:25:
70:a0:0c:57:f2:c3:66:5b:65:c4:6f:08:8b:13:ab:
11:e4:6c:b7:70:f9:12:03:cd:42:cc:1f:b1:95:96:
66:b5:32:22:68:e9:1e:d5:f6:ef:24:e5:98:67:0d:
21:74:0d:a0:4b:0b:3a:8b:5f:9a:5e:8f:e3:a7:30:
de:24:47:75:d2:2e:10:bf:05:4a:f6:0c:29:0d:bd:
ac:79:a9:14:9d:a6:fb:61:81:11:c7:ca:85:99:fb:
90:c0:18:b0:3d:f8:a2:5f:1b:fb:60:81:aa:dd:b1:
9f:c0:33:46:d9:06:e5:f6:e7:01:f6:96:66:55:4a:
56:66:0c:81:db:b8:0a:e2:20:76:25:62:72:06:ee:
31:8d:38:fa:36:63:8c:c3:62:0f:30:c7:2f:e9:f8:
92:ba:7e:64:c9:23:0a:99:c5:fe:38:11:3a:10:3c:
9f:81:e5:fc:7d:8a:4a:ed:45:00:4c:0f:a0:c6:59:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:77:6B:74:F8:35:40:BA:77:1B:D4:59:85:7A:84:6D:C5:EB:E2
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:cb:59:be:9f:38:a4:b8:09:d5:45:fc:9c:20:c1:e1:20:
3e:4c:7a:a5:7d:e7:4e:14:85:27:5e:c2:7b:f4:0c:03:31:74:
b3:69:20:8f:45:eb:a6:8a:29:57:c7:63:17:4b:9d:3d:80:97:
73:47:16:b3:db:73:ad:52:f4:5e:42:73:6e:cd:ae:df:69:fc:
70:34:43:ad:bb:5f:0c:f6:9d:de:bb:6c:7f:aa:42:87:be:94:
36:2b:b5:2a:c7:a5:64:e9:34:45:59:5f:3e:4e:0c:6f:7b:76:
3e:9e:cf:d3:ef:25:32:fd:f5:f2:a2:ee:92:70:7b:22:a9:93:
1d:ce:6c:1a:18:38:58:cf:4a:83:25:86:22:e5:7f:9a:71:34:
c0:99:b2:2b:0c:73:1f:b0:cd:ce:b9:93:88:97:80:92:f6:01:
aa:2c:4f:81:1d:18:91:22:06:e1:04:33:06:f0:ef:29:2e:dd:
42:c5:db:fc:af:60:ea:0f:c9:60:60:c3:ec:be:72:bf:0d:45:
a0:b2:8a:71:28:9e:18:2c:87:ed:d2:07:19:17:17:c5:be:c5:
48:50:da:58:dd:d6:15:c8:6e:ea:67:ed:39:9f:7d:3f:2e:d2:
c4:82:37:ed:1c:ac:c1:24:2e:88:6d:a0:ef:2a:87:f0:19:72:
14:42:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:40 2026 by rpki-client