Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: BdXRpqdiYPMizWl2lo5ZGNd/nwsIh2Vqzq9Q+NR1H2I=
Subject key identifier: 99:EF:D8:3A:CD:25:CB:F8:A8:ED:2E:FA:F2:1C:8E:6A:37:39:EB:F2
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019CAA219429C469D1EA27815C132D8E6236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: qXCHVSQ+GtCoH9IP4p3+vuzCJ1PbpV+KApW5VjomD+s=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:94:29:c4:69:d1:ea:27:81:5c:13:2d:8e:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=99efd83acd25cbf8a8ed2efaf21c8e6a3739ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:72:49:80:88:d4:dc:5d:fc:77:da:0a:42:
83:13:fd:5e:8d:47:b6:8c:01:06:e9:38:04:64:ac:
0d:37:a7:d9:1b:84:91:4e:90:06:06:ad:3e:7e:25:
f8:5e:28:9a:bb:19:50:2b:c7:67:b8:f2:bf:99:ea:
1c:4e:f9:d7:9a:13:da:66:4f:b2:f7:a5:55:2b:29:
24:fb:f9:bd:dc:ae:e5:d7:95:40:7c:80:57:00:f0:
7a:31:9d:cd:1d:77:82:0a:59:5c:c4:5c:d1:8b:a9:
12:0c:7e:b3:8a:e9:0b:eb:ae:b8:44:52:a6:59:cc:
d7:fa:c7:a7:72:8b:8a:9a:43:0d:d7:7d:4e:68:96:
c2:fe:7d:79:51:86:e7:7e:84:43:0d:37:b2:c4:95:
23:42:e3:07:ff:82:76:bc:81:b1:8a:9c:e7:b1:ad:
2e:5e:1a:3c:be:57:75:2d:d9:c9:d5:04:81:c3:f3:
4e:de:2f:2a:eb:8a:38:c6:53:0b:ae:2c:14:61:d5:
d2:53:70:f8:06:50:07:f9:c0:2e:1d:47:d0:0a:74:
0e:43:22:d9:37:a7:b8:0d:cb:07:28:59:d5:a8:e0:
b8:1d:bd:d5:a9:00:0d:aa:ea:5d:54:2d:d7:68:e2:
13:d1:b2:f2:66:79:c5:b9:e9:67:d1:d9:92:06:46:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:D8:3A:CD:25:CB:F8:A8:ED:2E:FA:F2:1C:8E:6A:37:39:EB:F2
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:87:95:96:7b:f2:da:f7:fe:e0:8d:67:5d:9b:c4:9a:9a:
ff:99:b2:95:59:8b:1b:9a:f5:8c:f8:cd:c1:6c:bd:4e:b5:fd:
6d:d1:42:da:23:74:de:47:4d:04:1a:89:d3:29:d8:34:ab:30:
4f:dc:96:4f:df:ff:e7:88:c8:7f:60:3a:20:b5:f1:a6:23:3e:
e0:2d:01:ca:54:13:e4:9a:17:53:99:0d:46:5a:2d:78:50:e7:
87:85:2c:25:4a:23:1c:ee:20:00:17:1a:27:61:bc:da:b8:85:
7a:7d:04:1a:8c:32:56:1c:8c:3f:de:2f:4a:5b:b5:b2:bd:04:
5f:e3:96:6d:54:32:ec:aa:2b:7f:26:8d:0f:b3:db:db:b7:77:
a6:b8:fe:1d:37:65:1c:cd:b9:fa:7f:6d:5e:3f:1e:6e:22:02:
4b:3b:0c:13:f0:6e:cd:b0:6d:d5:ff:e3:ed:e8:69:d8:ea:67:
9a:e2:96:f6:81:66:7d:c8:7f:00:33:ab:04:77:49:fe:b5:1f:
29:88:e3:ac:b9:d6:bd:d0:40:be:1c:9d:58:b7:ef:5b:14:b8:
f1:b7:e4:22:e6:56:50:03:7c:ca:89:3a:c6:36:8d:73:f3:bc:
77:de:db:93:e7:ed:d2:70:c5:b1:20:16:0a:df:fb:e0:71:35:
f8:17:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:36 2026 by rpki-client