Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: 51MpxxYaJZuk1BRkEZ/fgUueqLY8ADM/KvOGgwf2Tgg=
Subject key identifier: AE:12:5D:8B:B7:9C:B5:5B:87:2E:EF:4E:F5:B2:A3:04:1D:B0:67:EB
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019CAAFD5245668D3146CDE13E5822A0EA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: UZ/4iJMYt4Y6gkqBqHZ+8Q7sw4rIIbt/Dv+cZUv50w8=)
2: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
3: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
4: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
5: qJJ0wcWXHtXGbw82Hr-JWQr4AsU.roa (hash: GTpJtd9njL4o/WVli2fbOv6n9dmdweWLp2jvbliePk8=)
6: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
7: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
8: yT13HA89M9lex7KTGn39CizxepM.roa (hash: cUKc2MzhQ8fQzkrbpUsocGqB25zuQeATEp9/WG+cVbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:52:45:66:8d:31:46:cd:e1:3e:58:22:a0:ea:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=ae125d8bb79cb55b872eef4ef5b2a3041db067eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:27:54:a5:05:44:84:6c:c3:21:b6:ba:6b:
be:1a:b9:28:53:3c:f6:81:9e:47:58:fa:dc:c7:35:
b4:e4:f6:58:de:44:3c:89:76:11:f9:be:51:90:71:
95:63:e4:af:93:4b:e1:33:35:78:e8:7a:18:7c:29:
be:b9:ec:14:ca:c7:7d:be:df:0c:74:56:81:77:41:
b0:19:68:46:e3:e9:27:d1:2a:c1:b2:7d:c9:68:2f:
2c:bb:27:5d:ec:df:b0:11:ea:6d:05:25:bb:45:57:
30:3c:55:95:36:9c:e0:71:df:0e:21:b8:3c:42:be:
43:ec:7a:00:c7:46:6b:b2:55:38:63:92:a4:96:1d:
c4:89:38:66:b3:e5:fe:c4:fb:76:6e:2b:2e:e7:2f:
19:04:7c:b7:cf:12:f8:65:54:b7:df:7e:5d:67:44:
39:f6:f9:08:f1:fc:b6:94:38:99:2e:0e:e1:69:27:
d2:8b:f6:20:87:45:b7:dc:38:8b:4c:85:ff:34:76:
9b:92:81:5e:ff:a0:c2:e7:36:b3:20:b2:be:0d:48:
3e:28:b0:3f:90:9d:d6:e2:6c:38:9e:60:b2:64:be:
5b:b5:17:c0:21:dc:68:80:63:fe:86:0c:85:b9:7f:
f6:5f:56:a5:aa:00:8e:87:66:f2:3e:40:90:f4:cc:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:5D:8B:B7:9C:B5:5B:87:2E:EF:4E:F5:B2:A3:04:1D:B0:67:EB
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:83:18:33:08:7d:c0:34:94:41:6a:60:16:bc:4a:ea:ea:8d:
47:95:d3:88:df:f3:b1:65:4c:48:43:2f:86:7e:19:99:e8:29:
25:d8:48:bc:fe:7f:c4:7a:cd:05:df:fc:c9:b6:79:43:67:46:
09:e2:38:f5:04:f7:cd:50:6b:1a:38:1e:19:b6:3f:16:1a:ff:
89:df:a0:77:1d:8d:7d:48:47:73:4d:8c:a7:c9:2e:ba:16:73:
7c:e9:84:ac:1d:7d:c3:74:41:99:08:77:bd:77:11:9a:0e:ad:
5d:90:71:0a:d6:71:3a:42:77:03:e1:e9:69:02:8c:03:39:3f:
26:5b:8b:d1:66:4f:d9:26:35:d3:50:da:bb:6e:cd:01:53:89:
28:26:5a:51:a4:f1:6b:5c:e7:e2:67:14:d9:93:81:ca:d8:9d:
8c:d3:82:36:ce:f7:f2:8e:4c:7e:06:88:41:94:c5:9e:04:88:
63:3f:1a:57:14:e1:9b:3b:92:41:c1:ce:68:44:60:66:bb:5e:
e0:6c:b3:00:85:b8:f4:a5:bd:97:ed:1a:ef:ab:58:f4:dd:6c:
58:6b:38:f1:67:1b:4b:af:71:cf:23:2a:8d:e0:9e:75:e6:49:
2f:a1:f2:c8:02:65:be:06:88:b5:25:bc:07:be:11:28:d4:93:
95:a4:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:01 2026 by rpki-client