Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: p2S2JI6I33Y2OeO/3XtHR8HNzXqz++TQ9BHnmclMZ8E=
Subject key identifier: 30:07:EB:51:64:CF:50:3F:16:E8:E6:2F:29:FC:D5:3C:CB:27:C4:3F
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019CAF4848E931ED29E11B062BCF5FB4B3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 16:01:15 +0000
Manifest this update: Mon 02 Mar 2026 16:01:15 +0000
Manifest next update: Tue 03 Mar 2026 16:01:15 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: EQEqmpvYv5HVztLvS0afaZ6+8niQwMyqFbjgqLNbTEQ=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:48:e9:31:ed:29:e1:1b:06:2b:cf:5f:b4:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Mar 2 16:01:15 2026 GMT
Not After : Mar 3 16:01:15 2026 GMT
Subject: CN=3007eb5164cf503f16e8e62f29fcd53ccb27c43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:a3:d8:e9:22:c2:67:2c:6a:06:51:64:26:
22:a7:9c:44:e4:98:4d:fd:71:26:a4:2f:7d:50:e2:
f4:78:ef:cb:ae:73:aa:6b:89:ad:77:38:39:8e:21:
d2:16:8d:ad:44:bd:a9:4b:a6:4d:6b:b3:99:f2:2f:
86:ff:dd:43:c6:53:be:e0:38:c7:bd:c3:ec:2f:28:
ce:50:66:12:28:39:e2:0f:52:0d:0a:06:eb:11:71:
07:48:93:78:44:0a:6f:8e:d4:84:bb:1a:4c:d9:01:
bc:be:15:3f:e9:89:6d:6a:9d:20:6e:ff:24:ac:41:
f3:9c:5b:e3:3b:ab:34:18:6b:93:1a:0d:52:6a:f0:
05:8e:40:e4:27:53:c4:ab:06:dd:67:34:d0:b8:56:
40:c9:8d:57:40:ea:9f:7a:f9:3e:af:6e:21:c3:2a:
c0:21:c3:ba:4e:ba:29:83:3e:f2:2e:45:61:e8:b0:
a6:0a:76:17:94:89:49:00:f3:76:6f:11:de:cd:31:
3c:1c:be:85:25:dd:a8:5d:9d:a8:da:54:c8:6b:4d:
0d:16:70:10:63:28:a6:d1:07:de:be:cd:91:00:e3:
20:e5:28:27:95:4b:35:0f:1a:94:27:e7:2b:57:93:
46:9c:9e:5f:35:ea:33:1a:c4:f1:3b:08:fb:43:ec:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:EB:51:64:CF:50:3F:16:E8:E6:2F:29:FC:D5:3C:CB:27:C4:3F
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:67:87:35:83:ce:21:6e:ff:a8:7e:a1:9e:47:90:01:2e:
cf:ed:66:4d:a5:1b:a1:d7:5c:58:2b:96:bb:ad:6b:4d:c0:0f:
bd:77:40:25:54:c4:18:5c:54:a1:3f:90:d2:aa:d2:a1:31:69:
d7:a1:5e:e6:b9:40:b6:1e:51:77:c8:67:b2:1b:4e:84:20:fd:
1f:c8:c3:8d:59:16:a0:36:08:a9:58:10:d2:d2:ce:5d:90:52:
5d:6c:34:78:37:cf:01:59:bc:5d:76:fb:b1:9a:bd:28:92:86:
48:56:2a:53:08:4a:68:78:a2:54:9b:e4:4c:bc:99:28:10:57:
4f:61:7c:5c:0d:7a:2b:b1:8a:62:54:6f:72:12:76:3a:a3:05:
85:8b:cf:df:df:95:b8:0d:15:df:fc:e2:cd:68:15:19:dc:87:
ec:71:95:18:dc:13:12:2a:27:2a:8b:d5:06:cf:74:92:66:c0:
79:1e:82:7d:ff:a8:ea:9a:ab:77:df:d3:89:6f:91:45:c1:dc:
e2:57:9c:bd:a7:73:2f:99:4c:b8:54:86:c8:b9:7e:6d:ec:65:
73:25:a5:2a:50:84:b7:06:e2:0d:b5:39:2b:76:bf:19:83:cb:
62:93:44:c0:5d:05:91:48:ee:b3:f1:4f:3d:4e:f5:bc:5b:47:
ac:ea:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:22 2026 by rpki-client