Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: wy8c5P7MXXviCiTSG4hZNW6A13+2QiFfM6MSdr2evSU=
Subject key identifier: F4:70:82:AC:A3:B4:B1:3A:65:F8:CB:57:15:68:EA:43:68:CF:F6:74
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019CAAC7170E2B5B30FBDC47E370BD706E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: W81JDUpFG+PitqoXs7ZpQJLBk2RqHSkCpsrnEYEc3Nc=)
2: pLGoFC89pNsr7Py4cTyjK2qhEfg.roa (hash: E5aXP60TZFECYX5WU/DbcrY7n3oYD2lgvk9iR+kGxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:17:0e:2b:5b:30:fb:dc:47:e3:70:bd:70:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=f47082aca3b4b13a65f8cb571568ea4368cff674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:c8:44:fc:b7:00:c9:1b:68:ee:88:c0:93:
43:8a:1e:6c:07:e0:0f:28:25:8e:24:3e:7e:ef:31:
4c:5b:89:79:95:b1:91:ab:fa:5e:1c:ce:ab:f0:c8:
e4:93:61:35:76:cc:60:7a:18:0c:72:ba:9e:5b:81:
22:b5:00:42:7f:40:73:fe:2b:d6:b6:80:7b:32:a5:
40:0b:4c:b2:34:b7:a0:40:27:d1:69:f1:0f:9a:45:
d5:ff:36:4e:57:01:5b:ce:2c:32:05:3a:c3:77:94:
15:81:51:11:12:5f:20:59:1e:b9:6f:62:0e:f8:e0:
7c:b5:28:d0:b7:3d:f5:a9:60:5c:bf:e4:7c:8c:02:
41:94:a7:23:c9:5a:77:96:27:55:69:85:a2:b8:6d:
e6:ea:d4:36:31:9b:27:44:77:d6:ac:bc:e9:ac:77:
0c:8e:0e:1a:91:a3:ab:2a:16:fd:c2:cc:ff:39:9f:
ba:f6:d9:ae:65:10:c3:d5:af:77:fe:24:75:41:bb:
ba:03:07:3a:7d:22:3e:62:5f:27:61:af:4b:e9:87:
21:67:d7:f3:c7:4f:f9:ff:d9:a2:62:fb:c6:87:e8:
15:9d:44:43:4b:1c:f6:1d:7d:68:8a:4e:5a:d2:6f:
35:1b:c1:9c:36:b4:a9:f0:13:b2:91:69:e0:86:df:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:82:AC:A3:B4:B1:3A:65:F8:CB:57:15:68:EA:43:68:CF:F6:74
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:89:49:4e:a9:b9:aa:b6:88:ce:d2:d6:4e:1b:b5:11:86:e3:
51:11:b4:d0:bf:c9:df:ab:9d:c4:34:af:a9:d8:59:52:00:b6:
ae:9f:db:fb:42:5c:f6:90:7f:c8:b2:c6:74:64:0f:c3:a9:a3:
d6:0b:40:ab:1e:f6:f8:26:59:17:1e:76:33:54:96:b3:2f:81:
26:67:ba:92:ec:bf:41:b2:22:ed:3e:c4:9a:f3:e4:b7:3e:88:
98:c0:d1:b8:55:e6:4d:ee:c8:12:e6:c2:79:7b:03:10:89:29:
ff:2c:60:11:fc:6b:60:8c:a5:be:e1:96:cb:f2:2d:26:9a:60:
4b:0c:49:97:4a:13:9a:33:a4:13:9b:d6:f2:c6:ad:2e:7c:7e:
7f:b5:17:f0:a7:6f:9c:a2:5c:50:0a:cb:f0:99:87:85:c8:cb:
b6:9a:a0:6d:67:43:08:93:b8:1b:0e:cb:f4:56:46:6a:33:5d:
f9:3f:ee:02:8b:71:23:7e:9b:2f:93:f1:75:05:c2:7a:95:01:
fc:84:a0:4c:82:31:d0:f1:e8:ff:92:83:6d:18:cd:00:21:66:
69:c8:85:48:27:6a:0e:6e:45:24:58:29:48:fc:00:13:ea:5a:
3b:a9:1a:2b:e1:94:d3:3c:af:52:63:60:2c:ac:33:53:aa:44:
04:61:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:22 2026 by rpki-client