Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: FbaHODn+qmML0eme++p2DqdDKKf2sJu3ASWQdVpWRuQ=
Subject key identifier: 7C:53:53:96:F2:D5:0A:2E:37:A4:6D:98:31:44:F1:DF:65:0B:7B:B1
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019CAC1026BD25B69148AA86C0F16990752D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: 2wpo2Amfb85sg6UPbldGKF/HugXPIgCjDp/X1Vy2PmQ=)
2: cny5YunWoGOPcvtGZLymBoSxvc0.roa (hash: z2k+kuA2gEPwCUj1PQs/NjdvAeEDMEfFxUJYpvTthlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:26:bd:25:b6:91:48:aa:86:c0:f1:69:90:75:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=7c535396f2d50a2e37a46d983144f1df650b7bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:bc:3d:45:0d:05:be:7d:e5:a9:cb:6a:a7:
4b:ca:a6:e4:b0:d1:3b:5f:1f:37:0e:9c:a9:91:ee:
8c:00:2f:8d:d8:91:60:e6:68:1a:6d:70:b0:85:95:
ee:d3:17:89:20:51:2f:dc:41:7a:f2:b8:3f:4c:12:
69:00:8b:f7:fb:48:3e:10:1e:a2:dd:e1:83:8a:e4:
95:39:cf:cf:c7:0c:42:e5:77:32:e9:ab:ca:b9:9d:
f0:e2:c8:07:0b:20:98:81:5a:4a:36:ab:55:2e:e7:
bf:75:6a:02:b8:ca:b0:78:c4:d7:23:10:be:fd:0f:
a3:36:54:bb:47:3b:52:12:ce:7f:75:9c:71:5a:cc:
e2:3b:a8:67:34:f4:ad:04:3c:09:56:85:2d:12:5e:
cc:8d:45:11:75:3f:a8:15:ff:38:fc:1c:25:ff:58:
c1:ff:6f:f2:1c:54:b3:94:15:f1:5c:bd:2a:c3:56:
96:c1:e6:f1:e8:90:51:8d:21:22:44:93:1a:4a:27:
15:b6:7a:0a:3f:85:fd:aa:01:4a:1c:e5:9f:92:a4:
1f:f0:7b:86:b2:2e:22:45:c0:20:ed:a9:0b:af:80:
22:82:3f:c7:f8:d4:0a:0a:c6:21:e3:c9:ab:02:fc:
88:c4:80:f4:e3:c5:bb:f5:8b:e6:c9:29:04:23:7b:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:53:96:F2:D5:0A:2E:37:A4:6D:98:31:44:F1:DF:65:0B:7B:B1
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:cd:b7:dd:f7:39:c4:fd:c7:34:ee:a1:82:76:a8:0e:8c:
65:cb:e6:90:1c:80:2f:ee:62:1b:5c:fc:c4:a3:bc:86:a9:db:
fe:af:23:1a:c5:ed:61:a9:bb:f3:a7:6a:68:38:f4:8d:6c:db:
ba:18:c8:22:ca:cc:86:70:05:e2:51:3d:dd:23:ef:ac:24:08:
cf:5a:31:32:a1:02:50:50:94:5a:8d:2e:e5:21:38:40:82:3d:
c1:31:29:a0:9d:a1:30:1e:04:6c:10:ea:60:93:b1:26:11:22:
1b:94:f0:8d:4c:3d:8f:2e:45:f8:71:9a:9d:28:c5:f4:2f:5d:
f5:37:62:c3:70:e0:69:c9:46:41:dc:b6:57:82:0d:73:6a:1e:
d1:52:93:da:17:c8:76:f5:09:40:0d:57:6e:37:7a:79:78:a7:
94:56:56:b8:1d:63:40:e7:59:58:7d:81:95:9f:8c:98:e0:05:
20:e2:f8:21:93:a8:d4:af:8e:0f:8d:bb:78:16:7e:da:d3:4e:
8d:bc:86:77:f0:25:90:d9:9e:6e:e0:a9:43:2a:3f:93:a1:24:
e4:9e:5e:cd:81:27:a4:2f:79:87:09:87:39:58:4b:22:9d:1d:
6f:b5:c5:f0:fa:9e:eb:8d:ec:b7:0c:91:37:0b:58:69:1a:59:
b5:7e:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:38 2026 by rpki-client