Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: au6cM5XPE/Y7QJae1MTFIkh22Wtz+CA3kgOip5fH4mo=
Subject key identifier: 20:18:C3:65:07:0C:91:2D:3F:A3:25:E5:A5:63:75:B6:F6:02:93:6C
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019CAC1040180E3F99371772DD76A493C56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: oLiLsT/qn7lx2wh100iPZrFXS3c2+ZOtW/Y3tIbXrPQ=)
2: PahlhjJqGrmR7ccCJ4-LibnI27g.roa (hash: LaFPDV1Rm5DfsEs8IeTsqw4+SPLJfNtDOnyi8JDhCcw=)
3: SQYU9I8icjC1PnXxoUMPA7hZuuQ.roa (hash: os/3JTQZo5v32/YUHuB42SkbCkSG8rkSt1h0Yz40ENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:40:18:0e:3f:99:37:17:72:dd:76:a4:93:c5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=2018c365070c912d3fa325e5a56375b6f602936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:93:73:29:05:44:f9:76:6c:0f:40:6e:47:
7d:1f:69:c9:0b:c6:e9:fa:98:c3:68:09:c2:68:f6:
32:9f:d4:ff:fb:f6:d7:fa:87:3c:e4:d2:4a:ce:8e:
ef:d3:55:80:c8:78:2f:57:61:b7:16:19:d5:39:61:
6f:a7:59:75:fa:b7:f7:b2:10:8b:48:19:26:f9:67:
8a:16:77:27:d5:83:ed:e8:6b:69:26:da:fb:20:59:
81:ce:87:07:43:15:35:78:bd:9c:b9:8c:4b:aa:5e:
6f:b0:8b:a7:1b:b9:b1:5f:a9:58:8c:c5:89:a1:c1:
7a:67:65:af:d4:32:7e:ee:95:99:ff:82:e2:0b:74:
74:8b:6e:77:96:70:43:70:51:b2:4d:58:1a:e6:38:
8c:36:53:30:4f:63:de:cb:68:f9:25:48:8e:d9:b8:
83:ef:e6:db:f5:a1:99:f3:74:be:37:30:d8:45:34:
63:a6:58:df:31:9f:ad:e9:ab:b5:71:8a:68:ba:7c:
6f:e3:34:81:72:4f:87:0d:e0:30:93:34:b3:dc:d0:
fb:4e:0e:37:f1:07:ac:90:99:a0:6c:bd:cf:71:b9:
96:52:6e:1f:e4:dc:3d:9a:91:9d:c7:72:8b:25:a5:
3f:05:fb:31:70:7a:63:5d:e1:e3:e4:91:48:b4:d6:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:C3:65:07:0C:91:2D:3F:A3:25:E5:A5:63:75:B6:F6:02:93:6C
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:83:db:60:65:e2:43:12:47:9a:f4:10:a2:d5:fd:92:d0:
f1:0c:c5:0b:68:95:4e:1c:29:6f:9f:2a:eb:8f:ee:e8:4f:d2:
a8:d2:f3:7d:d9:cb:79:52:4c:a0:db:ca:e1:ea:d5:b3:94:6c:
f7:d0:b2:47:8a:0e:22:a8:7b:4a:b7:d9:0d:d7:01:dc:1d:6b:
25:cf:30:35:5d:1f:21:8a:ef:55:42:80:1d:e6:01:49:64:d3:
ba:1f:d7:90:ee:f6:20:e0:f4:68:63:38:77:67:a8:64:17:85:
10:d6:35:c7:0f:bb:50:ec:4f:08:ca:fe:e8:55:a7:63:d0:46:
f4:31:51:bb:eb:3b:8e:d3:ae:bd:7a:3c:82:79:c0:51:05:15:
de:f8:7b:30:f4:7e:9d:92:2b:6a:ad:d3:dd:27:c0:3c:b4:05:
44:c2:f0:37:39:d0:62:88:c2:3e:4d:df:30:15:f0:c2:ad:78:
d1:85:07:4b:a0:29:72:de:17:e9:e9:8b:6d:83:a6:be:56:ff:
3e:de:f9:51:e8:ef:38:48:ed:68:8e:c2:d9:6d:db:6d:42:7d:
08:92:ab:89:81:9f:20:08:4b:35:23:cd:3e:1b:d2:89:f1:00:
0a:95:58:aa:fd:2e:63:b1:9c:9d:ae:9e:b2:9a:33:b1:06:d2:
48:59:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:14 2026 by rpki-client