Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: 7bIqyIWVXQmMArackc0PBqwWVeLD44QJl9/0UPl2Mcc=
Subject key identifier: 7A:C5:10:11:E2:81:FA:DD:77:0E:DF:9A:88:79:8D:77:8D:B6:58:12
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019CADFE2A583B115873F0BB97997943D61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:00:41 +0000
Manifest this update: Mon 02 Mar 2026 10:00:41 +0000
Manifest next update: Tue 03 Mar 2026 10:00:41 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: SryPyL+Q53FXysGFXfHCc+F519NXvBswcSy2Z3YNc3Q=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:2a:58:3b:11:58:73:f0:bb:97:99:79:43:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Mar 2 10:00:41 2026 GMT
Not After : Mar 3 10:00:41 2026 GMT
Subject: CN=7ac51011e281fadd770edf9a88798d778db65812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:34:a1:35:0d:12:42:43:67:4d:09:7d:9e:
67:e6:7c:40:33:ac:9b:e8:11:a5:5c:3a:8b:6b:f7:
e7:3c:4b:f7:8c:db:1f:a7:d7:6e:51:61:89:43:7c:
92:36:d1:a1:75:46:48:cb:42:9b:0f:5b:28:73:82:
e3:ef:27:67:ca:fd:0a:8a:9f:b6:5d:0e:32:43:47:
bb:c0:f0:6d:1a:00:dc:22:9f:28:ee:a9:19:e1:ec:
c9:36:12:9f:3a:40:1f:ac:3d:33:f5:ab:3d:86:de:
96:fe:81:cb:e0:03:96:a8:0c:3e:27:05:d0:3b:33:
ba:44:4e:69:64:d2:5f:70:5d:70:46:8e:a6:58:a3:
17:4c:e5:d9:ef:91:52:32:2d:ad:1e:c4:85:76:af:
51:6f:91:18:84:c1:3a:1f:c8:42:8f:98:58:69:bc:
9f:ea:13:9d:c2:2c:b0:60:44:ab:c4:14:fd:05:74:
4f:57:4f:9c:7b:29:3b:58:75:e9:1b:c2:39:18:55:
e7:ba:48:47:79:d5:50:0a:22:b5:04:1e:bc:97:48:
d2:64:0d:df:0c:02:6e:66:4e:a1:10:94:31:03:37:
8c:92:10:b2:f1:3b:20:6e:12:46:1d:dd:12:34:9a:
58:07:0a:8f:ea:0c:a4:a7:f0:ed:ae:d2:55:45:af:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:10:11:E2:81:FA:DD:77:0E:DF:9A:88:79:8D:77:8D:B6:58:12
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:08:34:90:b0:c4:4d:be:a6:35:71:81:45:fe:27:01:11:7b:
a9:10:70:c5:e8:69:16:0a:97:1a:e8:ae:62:45:69:9d:b0:dd:
c6:d4:d5:41:2b:db:28:6f:6f:91:7b:0e:5a:97:69:1c:3d:44:
ce:a6:10:39:80:48:db:b2:fc:a2:4a:02:c8:3d:2b:99:01:5a:
04:7b:0c:74:5e:a6:81:e9:1d:7f:56:fb:3b:f9:b6:86:32:0b:
22:05:b3:1e:70:e6:89:6c:64:38:27:58:9a:67:bc:ce:50:f4:
3f:49:93:07:50:26:a2:f6:99:e2:67:25:4a:37:3c:cb:7f:13:
fc:4b:ab:6f:87:d8:c0:67:68:38:fc:55:fe:e9:c3:fd:60:11:
8e:bc:dc:72:ea:34:bd:04:02:5f:32:67:30:8f:73:f4:cc:9f:
97:de:ff:ad:a1:61:88:6c:fb:1a:c7:f6:25:d9:90:21:91:f5:
37:c5:8a:4c:f8:57:8d:76:b2:e3:c9:12:8a:e2:bb:9b:37:32:
33:22:36:7b:58:77:8e:2e:95:d3:63:88:6d:bb:12:ec:dd:ff:
db:52:73:77:28:4e:96:dd:cd:56:34:e9:2c:8c:a9:73:47:26:
f4:9a:37:53:c1:9b:1b:c2:61:d1:6e:d6:9e:ee:04:9d:e4:00:
b5:ce:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:12 2026 by rpki-client