Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: coonZVqXTzUiHE8ygoYEIs1TBXCCTtoVCHbMTl5YQGs=
Subject key identifier: D4:81:5F:57:A6:81:FE:A5:D7:42:E5:A6:58:1A:53:E0:85:E0:3A:FC
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019CAB344499A78585BCD970182AD30C1BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: eBGPMkEPamUAaqTJk5FawtwnJ5+wNaMnjkjLeC+6IzQ=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:44:99:a7:85:85:bc:d9:70:18:2a:d3:0c:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=d4815f57a681fea5d742e5a6581a53e085e03afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:13:66:e9:75:28:30:2a:20:41:6c:aa:60:
95:1d:12:8c:38:40:59:5a:dc:50:33:bd:3b:bc:81:
7f:d5:c0:a0:a1:9e:81:de:de:7c:d0:8b:d7:ec:e2:
64:19:44:37:b5:6c:8e:cb:a1:8b:31:8f:87:1d:d8:
03:93:43:66:f9:df:95:2d:6f:87:7a:2d:fc:ea:2b:
89:2f:b5:92:30:70:2e:ac:c3:51:c2:5b:40:e6:46:
b4:11:6d:bc:07:24:f1:18:fd:1c:af:85:33:6f:15:
10:af:0c:d3:31:a4:68:53:29:5c:71:a5:f6:2e:18:
9b:f7:62:ca:f8:0c:39:42:ca:ed:0c:4a:5a:a8:d7:
25:9d:d1:e1:57:14:83:f5:0c:4c:1e:c4:f6:43:20:
d3:7d:f1:c0:74:29:b4:5d:7c:95:77:8b:d1:98:9a:
63:2f:6d:c4:c5:a8:bf:c3:2e:59:6b:6c:28:54:4a:
c9:06:87:57:3b:0a:16:0c:32:ac:42:d0:0a:b2:b2:
45:5b:5a:0f:dc:07:1c:61:90:1e:ca:d5:55:9a:41:
cb:8c:6d:8f:9c:6e:d1:48:5c:42:13:03:04:75:53:
ae:fe:0f:cd:74:3f:21:7c:00:aa:fd:e5:00:1a:c2:
6e:e6:91:fe:f3:d9:2c:fb:60:1b:3b:9d:a4:25:df:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:5F:57:A6:81:FE:A5:D7:42:E5:A6:58:1A:53:E0:85:E0:3A:FC
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:47:e9:3d:16:d7:6f:1b:d6:c3:16:8c:87:79:c1:ee:62:
94:55:17:d4:de:9d:0f:b5:e9:32:fc:9b:01:b7:07:14:fd:f4:
77:4e:07:eb:fa:22:43:90:a9:12:3b:78:a3:f9:86:61:fc:db:
27:b9:bc:f7:8a:a6:2a:c8:a5:83:15:ac:a4:ba:0a:7f:33:f0:
47:3d:f0:1a:03:d3:35:1b:f3:97:28:4b:59:47:df:7c:a9:8a:
21:af:db:7c:a1:56:e4:46:e4:c7:e6:b6:f1:b7:a3:13:f7:d1:
25:4e:e5:78:57:42:04:07:6e:7d:ea:8c:30:10:2f:fc:20:b9:
ff:80:ab:68:5d:e9:ef:14:d9:d3:d5:94:c5:c6:1e:e0:a5:9b:
48:98:98:86:45:24:72:55:89:f9:ac:fb:0d:af:45:9c:44:08:
f2:2d:f0:3a:fb:f1:e4:9f:27:93:95:56:74:6d:44:fc:32:bc:
ff:ae:c2:51:05:ce:f6:c8:42:dd:45:7c:d3:a7:e0:68:8e:28:
a7:b2:64:9b:cd:db:d5:f2:52:64:da:e5:22:15:26:cd:07:8d:
de:8b:ae:70:f7:13:51:1b:4c:26:24:cf:02:ac:41:46:30:6a:
1d:85:3c:7d:7e:72:81:38:07:db:32:53:27:57:b5:aa:80:14:
23:27:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:09 2026 by rpki-client