Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: KStj6C9issM71wVwpNkfUb9SuCpQAy77e8O7aFdfyt0=
Subject key identifier: 1F:72:6D:0A:9B:52:2D:DB:74:92:B9:2E:B1:AB:5A:8B:DE:5B:34:F4
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019CAEDA04F3BAA6E297297CA9A6C481875E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1789
Signing time: Mon 02 Mar 2026 14:00:49 +0000
Manifest this update: Mon 02 Mar 2026 14:00:49 +0000
Manifest next update: Tue 03 Mar 2026 14:00:49 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: HvTFlhmssax3VFrdDZtiqJfLJygvIsbTDYB0WNHqNao=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:04:f3:ba:a6:e2:97:29:7c:a9:a6:c4:81:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Mar 2 14:00:49 2026 GMT
Not After : Mar 3 14:00:49 2026 GMT
Subject: CN=1f726d0a9b522ddb7492b92eb1ab5a8bde5b34f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:7b:eb:d0:cd:87:d5:56:c3:f3:de:24:15:
34:d7:4c:66:16:da:f0:1c:b6:0f:cd:c8:fc:94:04:
b2:b9:54:7b:65:68:2c:7c:e6:28:de:2d:05:19:c4:
90:c7:53:dc:b4:de:c2:f9:a8:16:17:dc:6c:46:03:
a4:37:37:54:93:49:d5:fd:1a:98:c3:3f:e7:80:a1:
0e:96:02:e3:4a:47:2f:9c:11:de:98:04:fb:ac:12:
2b:5b:da:4f:c1:21:70:22:7a:16:e1:5b:68:1c:75:
58:de:3c:93:37:a2:f3:f3:fa:c4:22:7e:4f:81:46:
3e:b2:75:e9:ae:51:14:f4:67:65:19:b1:de:84:26:
f6:ef:e0:a6:18:ca:cc:6e:54:3c:cf:a0:20:92:e5:
d5:f8:ff:df:8d:f7:ce:ab:14:83:69:64:e0:f2:f6:
40:7c:0d:f0:6d:a8:4a:9d:d7:ec:70:bb:d0:f5:7d:
ff:59:3f:38:6c:1b:e7:73:31:97:86:49:50:88:37:
8a:b8:ee:9d:ff:89:2f:90:0c:e1:2b:ab:b6:cd:89:
d3:3e:0f:69:c6:b2:66:20:43:6a:b8:1e:85:56:9c:
e8:c4:26:36:9f:5b:63:02:92:1a:47:de:5d:93:2c:
7d:06:17:08:09:65:89:2c:2b:12:fa:16:83:72:83:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:6D:0A:9B:52:2D:DB:74:92:B9:2E:B1:AB:5A:8B:DE:5B:34:F4
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:82:a5:4b:89:5f:3a:12:27:c5:d0:e3:19:7b:01:5b:d4:
38:c2:09:31:da:03:27:d0:c4:a7:71:29:27:ac:bd:c3:1b:48:
a2:68:86:b6:39:26:44:1c:47:86:5c:88:ac:0d:d3:1a:ce:ec:
dd:05:db:0f:bf:e2:e4:e2:44:8c:35:9c:c2:ce:87:97:e9:26:
79:91:a8:0a:86:ee:39:42:a7:e1:84:18:dd:2c:a9:5b:25:c5:
1d:13:1a:15:cd:f3:af:fc:ce:d5:30:8e:92:c0:0c:f3:47:f8:
a8:3a:4a:9f:a1:7b:a5:81:b5:c8:cf:86:b3:f8:36:6b:e3:4a:
84:1b:bc:a3:a4:f6:7a:ec:75:3c:c6:9c:26:32:be:d2:bc:68:
79:19:cc:41:fe:ec:3f:69:aa:63:b1:61:3c:3c:93:85:b1:da:
eb:f8:72:2c:74:e0:1f:a9:6f:10:ec:e4:54:7a:53:11:e1:ba:
42:53:48:e1:5a:31:0c:c7:ab:56:af:0c:8d:7b:09:dc:c8:a3:
92:08:2b:7e:8f:64:c4:05:c0:a3:58:d4:d0:bd:5c:16:f3:71:
95:84:9b:c8:8d:79:e1:02:ad:85:fc:0d:32:80:1d:d9:84:08:
2e:27:ba:4a:ee:9f:76:bb:b5:6a:2e:32:b8:0f:52:ad:59:3f:
af:f3:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:49 2026 by rpki-client