Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: Hf7SnxO8tLjVqqfKve1dSMiRgGvMt1EqsUadRSNa0N0=
Subject key identifier: FF:91:08:FD:EE:1A:BF:72:DD:D4:14:D1:A8:D2:E5:AE:8C:6C:98:64
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 019CABA233B49C32B5A8850797502FDA0C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: 0YZtTmmCK8uDJ_NrkfevzGMNNso.roa (hash: 6Ainezg6BcOqKKKEtPKxa2vRRGnNyqWUZ83d7KhIAYw=)
2: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: jPod/yTG4H4aCXrdQPy20aUn2NVQEwwvoYEwYSSVUXc=)
3: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:33:b4:9c:32:b5:a8:85:07:97:50:2f:da:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=ff9108fdee1abf72ddd414d1a8d2e5ae8c6c9864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:e3:d1:35:29:a7:4a:02:7f:c3:bc:58:72:
f5:6a:2e:48:ef:58:ed:79:8f:50:ee:a4:9b:a5:76:
76:41:12:da:e2:ad:ba:58:8d:3c:f2:54:3a:ff:9d:
d2:b1:b4:64:ae:87:74:e7:1a:e2:e8:97:d6:bb:ef:
21:ea:39:1d:96:88:43:14:94:27:09:78:08:2b:a2:
a3:af:99:37:b8:4a:61:6f:ca:cc:ab:7b:a5:a4:ba:
75:a6:0c:d1:2b:7a:93:6a:fe:0e:32:cd:87:d8:e9:
60:1e:01:17:3d:0b:1f:9e:97:1e:57:d5:4a:8f:c8:
a6:8a:45:6b:1f:2e:32:a4:89:e3:4b:cd:f7:dd:a7:
96:86:fb:6a:72:93:2f:e7:74:27:98:50:cc:1d:be:
4c:33:83:14:8c:6a:ad:cf:db:70:07:10:fa:40:a3:
d9:0a:2f:8d:0c:bf:1b:f7:1e:1b:8c:7d:c4:2e:a1:
61:18:b0:e9:ef:03:a3:ef:30:31:19:12:90:1d:82:
bb:2b:84:0a:f2:aa:a9:f9:f9:84:69:6e:5c:9c:0f:
50:85:e2:ba:bb:26:7f:4d:39:55:9c:5c:8e:1a:f8:
02:69:82:c3:e4:4c:99:01:00:97:4b:70:c3:5a:e9:
f6:33:ee:85:36:2b:f4:d2:6d:4f:eb:55:14:1c:54:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:08:FD:EE:1A:BF:72:DD:D4:14:D1:A8:D2:E5:AE:8C:6C:98:64
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f3:14:aa:67:0d:a2:c2:68:fb:c6:7d:93:37:d3:22:63:fa:
a8:2a:1d:33:27:9c:c1:c3:29:5d:05:8c:fd:08:8b:37:95:13:
6c:59:cc:07:9d:68:f0:39:f4:bc:17:6f:57:33:bb:87:54:96:
ee:ea:73:d5:ba:b9:a3:92:08:44:0a:7e:89:40:05:cd:f6:03:
59:a9:87:c8:72:53:28:53:db:56:df:86:f7:68:67:de:ac:58:
6c:c4:d0:3d:88:02:b0:71:ce:e9:b8:b5:33:0b:00:dc:ed:8f:
6c:cf:b3:2d:4c:7e:d1:5d:26:3d:b6:56:85:45:85:52:b3:d0:
1d:16:d1:09:75:4d:4b:34:25:33:6a:20:0a:09:f2:d2:a9:31:
bf:37:cd:a4:bc:7a:e3:6b:d6:6c:e7:12:c7:59:eb:e9:01:90:
44:9b:21:6a:bb:51:f9:c1:83:1e:54:be:71:25:5a:54:d9:d7:
38:18:a2:2e:ad:39:fe:c3:bb:a2:af:14:58:67:1e:77:c9:81:
e7:28:84:48:6b:34:85:05:b8:55:eb:9d:7d:49:68:e8:86:5c:
5a:2c:dc:a5:67:f8:5b:c7:37:52:13:72:66:35:8b:02:62:87:
40:de:4f:af:0e:d9:49:11:1c:83:a0:16:53:ac:74:94:3d:6d:
70:61:e6:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojO0nDK1qIUHl1Av2gxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjYwMzAxMjMwMDU5WhcNMjYwMzAyMjMwMDU5WjAzMTEwLwYDVQQD
EyhmZjkxMDhmZGVlMWFiZjcyZGRkNDE0ZDFhOGQyZTVhZThjNmM5ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrDj0TUpp0oCf8O8WHL1ai5I71jt
eY9Q7qSbpXZ2QRLa4q26WI088lQ6/53SsbRkrod05xri6JfWu+8h6jkdlohDFJQn
CXgIK6Kjr5k3uEphb8rMq3ulpLp1pgzRK3qTav4OMs2H2OlgHgEXPQsfnpceV9VK
j8imikVrHy4ypInjS8333aeWhvtqcpMv53QnmFDMHb5MM4MUjGqtz9twBxD6QKPZ
Ci+NDL8b9x4bjH3ELqFhGLDp7wOj7zAxGRKQHYK7K4QK8qqp+fmEaW5cnA9QheK6
uyZ/TTlVnFyOGvgCaYLD5EyZAQCXS3DDWun2M+6FNiv00m1P61UUHFQ1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+RCP3uGr9y3dQU0ajS5a6MbJhkMB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/MUqmcN
osJo+8Z9kzfTImP6qCodMyecwcMpXQWM/QiLN5UTbFnMB51o8Dn0vBdvVzO7h1SW
7upz1bq5o5IIRAp+iUAFzfYDWamHyHJTKFPbVt+G92hn3qxYbMTQPYgCsHHO6bi1
MwsA3O2PbM+zLUx+0V0mPbZWhUWFUrPQHRbRCXVNSzQlM2ogCgny0qkxvzfNpLx6
42vWbOcSx1nr6QGQRJshartR+cGDHlS+cSVaVNnXOBiiLq05/sO7oq8UWGced8mB
5yiESGs0hQW4VeudfUlo6IZcWizcpWf4W8c3UhNyZjWLAmKHQN5Prw7ZSREcg6AW
U6x0lD1tcGHmpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:18 2026 by rpki-client