Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: evR62yV8jXK+lcnopY5qQj+XYHqRxmDIzkhbrh/9uQ8=
Subject key identifier: E1:10:9A:0A:72:43:4A:84:F9:5E:46:D2:86:7F:58:3C:75:AB:18:EA
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019CAC46D025C985D962DC51D1954A01F91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: 5evatS9xCvi3Lxw6r/2m0wIiXTbjDd0baekiNBnjFCs=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d0:25:c9:85:d9:62:dc:51:d1:95:4a:01:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=e1109a0a72434a84f95e46d2867f583c75ab18ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:3b:32:d8:a3:3b:e8:b6:82:dd:19:74:33:
be:f3:a4:34:44:81:93:24:cd:b3:1a:d8:93:9b:86:
98:e3:8b:ec:01:ff:c9:d1:f5:c2:48:58:3a:6f:2e:
fb:84:e7:fd:15:11:b8:40:4d:e1:5d:68:93:d6:df:
87:49:67:7c:f4:66:46:15:aa:22:f4:c0:0b:50:c5:
92:6c:a7:89:e3:7f:23:55:28:27:53:5e:96:33:7d:
32:44:be:f8:74:ea:49:6b:12:16:17:80:6e:48:c8:
3a:b8:36:8f:5a:ce:70:2d:a9:b8:ec:80:91:4d:61:
27:8e:4c:58:90:9a:cd:30:39:5c:7e:b0:c8:a0:bc:
a0:2d:97:75:39:a8:7a:a0:83:57:13:e7:4b:30:29:
1d:0c:03:e4:88:38:5f:a5:09:2d:bc:7a:3e:46:a4:
31:65:70:c2:66:0a:70:7b:60:f7:8b:4e:66:6d:9c:
75:6d:9f:00:f2:28:a4:6b:6f:97:17:cb:1b:b4:d3:
75:d4:70:96:b1:27:73:ed:59:57:5e:2d:0c:7a:25:
e4:cf:9c:42:0f:2e:8f:ff:e4:63:23:df:76:49:66:
d4:c0:3b:9d:97:33:87:b8:6e:53:6a:ba:fe:bd:4b:
7e:7b:e8:4a:13:0d:5a:ed:b0:a5:33:71:68:40:f4:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:9A:0A:72:43:4A:84:F9:5E:46:D2:86:7F:58:3C:75:AB:18:EA
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:8b:e9:f1:64:99:13:12:c9:c1:2c:f8:a1:b8:21:8d:00:
30:47:0e:ed:2d:c6:8b:02:f8:4d:2e:78:37:04:d8:b6:56:3b:
ad:61:ca:e0:27:8d:2a:eb:f1:5c:ce:5e:ed:6f:e9:82:67:51:
be:bf:c6:5d:2c:54:63:1e:51:f8:fd:a4:fb:e1:0c:c6:d1:25:
df:2f:55:c1:a9:2c:18:b0:b4:55:34:eb:e8:b1:da:62:79:90:
55:9f:e0:15:6e:59:1b:b4:45:11:b8:91:60:b3:11:09:60:e7:
14:29:f9:26:c2:1e:ad:a0:6c:22:a5:cf:a4:54:49:d2:b9:9d:
31:f1:47:76:38:d3:34:94:ac:0a:47:3e:8f:32:fa:4e:64:0d:
62:17:84:f8:66:2e:fb:a4:10:d9:cf:c9:42:e3:11:39:ea:a2:
1d:e8:3c:02:da:1f:91:4e:d9:46:7a:b0:fa:93:5f:ea:ce:b7:
08:ae:48:d0:87:5e:ec:6e:61:68:0d:32:80:52:66:47:9f:7a:
16:62:33:77:e0:e2:a2:77:17:b0:27:3c:bf:1b:44:aa:6e:21:
53:e7:6d:17:57:1d:59:d1:48:43:c8:7b:4a:9d:e1:9a:ee:d2:
8f:2d:24:5b:c4:ba:e1:7a:ef:b3:c9:6c:12:d3:11:55:be:a4:
ba:4b:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:21 2026 by rpki-client