Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: RPXOxNKuwjwxYyJja9OPmfdj6GvnTd0lYGM3qzw/yew=
Subject key identifier: CA:D1:29:C4:FF:49:1A:90:43:1B:A4:08:90:FE:AF:87:55:5C:FC:DA
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019CAC10294F0C9F7869FDA0E58F2CB4226A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: MXe+icWf92uirGkNxrwnrdkRIEGYG6nUWNJPHS9uMxQ=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:29:4f:0c:9f:78:69:fd:a0:e5:8f:2c:b4:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=cad129c4ff491a90431ba40890feaf87555cfcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:85:1c:ae:79:13:6d:36:ec:e8:5d:39:a2:
45:7c:c9:86:e5:1b:fa:19:7e:dc:40:ea:5f:ec:10:
05:cb:7b:4e:0a:66:a1:8c:ef:6c:4b:90:6a:1e:95:
7f:18:57:36:b1:55:d8:c2:25:49:fb:92:68:f0:8f:
e1:92:83:12:6c:0d:ca:d4:7a:77:d8:9e:aa:9b:9e:
7a:f6:7f:74:3e:7e:2d:53:67:75:12:5b:27:4c:9c:
68:7c:e4:ad:86:43:a6:0c:ab:1a:4a:18:fc:1a:a4:
03:26:eb:ff:db:04:2f:b8:3a:3f:69:a4:a0:31:48:
f1:aa:d3:76:76:6f:e7:b3:11:ed:6e:99:c6:0f:3a:
ea:e7:c0:67:a0:9b:5f:54:f6:6e:b8:f5:ca:a9:d2:
0f:c2:aa:2f:e1:c5:45:58:84:7e:52:f2:39:ee:8b:
97:14:71:b0:e3:e0:d0:50:e2:68:42:54:cf:fe:82:
02:c0:59:c4:3e:f5:14:98:ae:3d:51:10:83:32:6a:
fb:55:7d:3d:ad:b7:1a:4c:6a:dd:f1:6b:08:0b:e2:
d8:60:67:6f:3d:74:94:df:72:47:0c:b2:a1:8a:a5:
23:ba:a9:8f:94:9b:a2:85:c8:7d:fd:9e:5f:d7:bf:
8f:a3:ff:e8:34:d6:59:80:2f:29:85:f2:dd:29:33:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:29:C4:FF:49:1A:90:43:1B:A4:08:90:FE:AF:87:55:5C:FC:DA
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ec:da:52:fd:2c:9f:fa:af:48:b2:d9:e0:86:45:0f:cf:47:
a2:5c:be:b3:a1:00:4f:65:d2:88:24:44:30:4d:6b:aa:1a:4c:
5b:60:dc:f0:e3:ef:22:5a:9f:e2:17:ad:f9:7d:23:81:65:63:
86:39:f2:50:58:fa:30:df:ba:e1:44:24:a1:4e:5a:1e:76:f8:
31:0a:f6:b6:08:5a:64:b8:d4:0d:1d:cf:98:4a:32:06:33:ed:
2b:86:63:a9:16:d0:10:6c:e2:55:21:b1:1c:85:55:a5:aa:e2:
53:3c:73:7e:b3:71:23:79:1f:ac:85:ef:ed:21:fc:06:7f:09:
d2:ec:c1:9f:5f:55:22:b6:d3:30:a6:e7:65:c9:cf:b9:a0:21:
b1:f2:52:5b:e9:26:60:b6:f0:e1:c9:d2:be:79:0c:30:2c:97:
92:c9:0c:24:ca:2f:f7:48:a1:d9:3c:c0:70:00:af:d7:c3:f1:
fa:f0:13:04:15:47:d7:cb:31:53:7d:ac:2e:6d:45:90:c2:8f:
d3:c6:3e:a9:e4:ab:99:ac:f4:b8:46:f2:30:08:6e:98:fc:e7:
ca:6f:a8:c4:e6:5d:94:4b:d3:5b:e6:d2:77:a7:77:55:36:aa:
e0:e0:ed:8a:a8:e6:39:a4:45:5d:e8:f6:11:0d:a7:a9:9c:ae:
50:f1:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:38 2026 by rpki-client