Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: 4CDgj3+3h+LJdY/8v8Mxui5ANrpYxXdxlLzjgRG1E3k=
Subject key identifier: A3:98:95:D8:8F:2F:25:15:E4:89:A8:57:71:D9:5C:12:36:2A:71:4A
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019CAC0FA909EEB5EB4DCA4E71A757A20A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: xUhOTDiUl+RdgkRm9LSbhv16USxxXq2gd2bd/uS/jFU=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a9:09:ee:b5:eb:4d:ca:4e:71:a7:57:a2:0a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=a39895d88f2f2515e489a85771d95c12362a714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:eb:0e:f1:47:31:72:83:67:bb:90:0c:8a:
54:22:b2:48:fa:e7:2d:53:ed:b8:2f:55:80:db:0d:
fe:37:0e:e5:e5:23:de:d2:32:5a:df:be:1e:36:28:
5f:da:1a:04:b3:14:96:d8:77:2f:87:e3:a0:66:25:
03:a2:8e:49:11:86:66:8d:12:93:0b:8f:87:f9:4a:
68:a5:34:16:bf:bc:3f:cc:32:0a:16:78:61:82:79:
2f:10:45:0c:e4:f5:3d:47:33:ea:65:a7:d9:03:39:
a0:7a:36:62:b3:ac:b1:42:e8:31:d2:f0:06:dd:a1:
24:95:17:78:d8:f4:f0:2e:3b:05:62:52:5f:01:cb:
ab:d7:e3:c0:2c:3b:b6:7f:33:3f:e7:23:3b:54:ea:
bd:65:28:10:3d:08:81:37:f1:3b:2c:ff:cd:33:ba:
5c:a7:b6:7e:56:35:4e:e5:4b:f0:84:84:66:ab:d1:
15:e3:41:74:c6:63:7c:4b:b9:45:55:4f:67:d0:88:
a9:80:8b:de:cc:d0:4e:75:53:29:34:44:04:41:0a:
79:f6:d4:ba:bc:71:55:19:c1:45:6d:2f:c9:ad:1b:
85:51:e9:45:f0:33:d7:61:87:b6:3e:48:02:7b:bf:
db:84:c7:57:0f:b9:83:72:d7:ff:62:fe:84:5d:76:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:95:D8:8F:2F:25:15:E4:89:A8:57:71:D9:5C:12:36:2A:71:4A
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:3b:e7:ed:c2:56:cd:52:ad:2d:4b:51:65:b5:a0:d0:08:
4b:cd:32:e7:71:f9:07:2b:b7:ab:a8:e9:a5:45:be:e1:42:9b:
29:b8:72:2c:fa:d0:a0:e7:40:9c:58:16:3e:9c:b8:0d:ad:b4:
fc:91:f9:6f:34:4e:da:f3:d8:5e:fc:c7:4c:5b:91:41:1c:7e:
34:9b:60:9b:59:e6:d2:a5:07:6b:6b:3a:9a:ff:a2:81:9a:39:
01:c8:68:73:e7:90:2a:40:b5:03:f7:99:92:1c:b0:ca:37:d7:
97:c9:52:1a:6d:50:78:72:56:c2:0b:d3:28:86:74:b5:d9:4f:
d6:10:33:b1:b6:38:10:ff:13:7e:a7:71:f8:60:46:e2:8a:3c:
42:77:0f:64:37:23:2d:27:b3:14:20:7e:ee:47:7b:f0:bb:5c:
f8:36:fb:42:50:e7:b9:88:30:b1:89:7e:d1:a8:1b:1a:46:f8:
0e:eb:c4:5d:7c:7d:07:4f:d8:78:04:50:a2:5d:ca:c1:eb:7c:
d9:4f:a6:ae:22:0b:9f:9a:ba:4a:26:00:ce:18:25:97:59:57:
41:e9:74:8d:7c:86:f7:fd:94:26:78:ed:7e:08:d1:e9:35:18:
a3:9b:12:11:94:9a:90:74:a8:df:d0:a8:3e:a5:45:f5:7d:f5:
52:cc:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:31 2026 by rpki-client