Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: ZNqFTjIisq3/CMz4JzIeAoSG/qFny5cGwz3u9fC9Avc=
Subject key identifier: 28:EC:3E:96:07:3F:30:8D:C7:10:20:10:A9:3C:E7:1E:3D:4C:8E:F5
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019CAA8FC02F285B77A2D5DDC88B0D3C3557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: MAYIuQtNjdyZrjQa6xExtxcU/M4G42w+PmLA4Hc5fXE=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c0:2f:28:5b:77:a2:d5:dd:c8:8b:0d:3c:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=28ec3e96073f308dc7102010a93ce71e3d4c8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:04:7c:f8:9e:aa:c0:7c:84:b6:d1:f1:1c:
7a:93:9c:8e:14:94:c3:79:65:90:a0:f7:de:e1:9d:
9a:65:3a:ba:83:5b:64:74:df:94:f8:f3:b0:84:d8:
ea:4b:88:35:0b:d8:1d:b4:62:df:3e:04:1a:3a:3c:
be:a9:cf:c4:2e:d6:65:b1:76:55:55:cd:61:06:8b:
b8:83:b5:16:d1:7f:b7:13:20:c6:0e:d6:ed:43:fc:
ff:f9:7e:3c:19:f3:cc:5e:56:d3:ea:e8:b1:55:38:
49:99:72:00:54:78:08:59:65:4f:ed:86:41:91:65:
ca:3b:47:cb:d7:4a:4f:25:d5:63:a2:5e:a5:57:aa:
42:f5:44:8c:f2:b1:2d:44:1a:44:09:37:a7:c7:b3:
66:5c:ef:23:54:b7:4e:1e:61:50:98:9e:32:2b:95:
c0:bc:a0:dd:2b:71:af:3f:72:29:69:ec:cf:a6:a3:
ee:86:c6:9e:1a:20:ba:d9:da:a9:d6:ab:2a:a8:fa:
a7:33:41:ed:ce:02:00:54:5a:d9:ab:a2:90:ff:9b:
5d:08:23:fd:90:90:d6:06:87:24:a6:d1:3c:b8:e3:
88:27:a0:d7:00:9b:d5:06:dd:26:b7:c2:bf:fe:df:
f0:29:5c:76:df:6f:42:83:c3:2c:4e:0f:1b:17:e9:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:3E:96:07:3F:30:8D:C7:10:20:10:A9:3C:E7:1E:3D:4C:8E:F5
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:23:94:2e:cd:03:6f:bf:9a:a2:63:14:a8:67:99:74:59:e2:
db:b3:e6:16:62:d1:95:6d:ca:70:c1:b6:6a:3a:54:78:49:98:
a7:db:2c:53:a8:3a:2e:09:fe:c6:98:e0:57:ac:19:07:bb:ee:
ef:7b:6a:6b:6a:e5:ad:f7:d4:00:bf:95:60:8d:b2:a9:07:2d:
66:47:37:b2:f5:08:53:89:cb:7b:43:23:9c:cc:c0:af:95:b4:
fb:55:8c:a6:6b:d9:bb:ec:31:fb:bd:e4:2a:af:f5:c2:10:58:
39:78:89:aa:32:ca:44:59:70:39:d8:aa:d8:7b:95:ec:cf:76:
de:9a:8b:90:78:3c:51:2d:b5:b7:8f:2f:0d:16:72:99:cb:17:
1a:22:c6:70:6c:e6:3a:41:e3:60:42:ad:e2:a5:43:bc:ff:48:
ad:c4:36:f1:7a:ed:af:6a:a8:56:3e:8c:0d:1a:57:b5:dd:83:
f8:ec:c2:b4:c9:0d:f5:71:e6:cc:90:cb:28:3b:4c:32:5f:7d:
44:31:89:d5:82:14:79:10:e4:4a:91:f6:38:fd:a8:30:5f:7b:
44:d0:44:be:12:d9:75:5b:18:a6:a5:24:1f:83:cd:ae:85:d2:
f8:7d:2f:95:40:42:3e:c8:ed:66:eb:96:a2:62:9f:d1:ca:df:
8a:62:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:29 2026 by rpki-client