Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: necvw41bgHklmLlmYJnTxSrKxGHbOEKKj/dMLTdAPsM=
Subject key identifier: CF:6E:34:5F:0E:DB:78:82:FF:71:BC:14:F7:0F:7A:85:D1:A6:1F:66
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019CAA8F5F3F78712F65104D5F36E3C03557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1189
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: XDBlIek9C5pf0fm2OUfCmBw2t/IiWTuRIyZKDW40JKE=)
2: PPRaTVoWQxqgJS86OGcLmeFlqjs.roa (hash: m4L7LYwGypVuro0rB7cA22ndxC3bOW1LY8iuZIzj8bQ=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5f:3f:78:71:2f:65:10:4d:5f:36:e3:c0:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=cf6e345f0edb7882ff71bc14f70f7a85d1a61f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:9b:54:27:f0:f9:d7:9b:0d:b9:41:96:8e:
b4:3c:a0:d0:49:76:66:6f:5b:1f:01:6a:ab:53:20:
b4:cf:de:8e:d1:25:ec:a9:0b:38:af:04:b7:5d:fe:
8a:e3:dd:48:1b:4d:9d:21:16:8f:28:0d:68:44:73:
74:c3:95:9a:0b:f1:31:e6:a3:82:72:4d:c5:97:c8:
35:98:17:48:d3:b0:d6:ed:e4:80:de:3f:be:ad:54:
18:ac:de:da:b5:5a:bb:01:ed:87:1f:23:80:51:c3:
9b:1e:38:62:72:55:df:50:13:a1:8a:fb:d4:95:a0:
f5:7c:c5:6a:38:b6:66:8b:9a:59:c0:ee:f0:ea:9e:
76:b1:ad:8b:48:7d:f7:47:34:23:1f:79:ab:c5:a3:
1e:92:86:e1:ef:27:03:11:ea:98:90:53:f5:9d:3c:
f2:a7:0b:0a:d9:b4:42:a3:af:c6:f8:0f:c8:96:d3:
05:4d:c6:8a:85:f4:f0:67:8b:91:d8:08:7a:db:b3:
38:c6:db:7a:76:0e:3d:71:ad:23:de:6f:87:a4:b8:
3a:21:1d:93:46:92:ff:b0:f8:96:fa:db:61:f7:24:
45:59:d9:f0:9d:b6:18:9f:71:8a:e6:44:74:7a:85:
44:c2:ec:d0:28:93:4d:16:4a:ee:8f:18:5a:c0:f4:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:34:5F:0E:DB:78:82:FF:71:BC:14:F7:0F:7A:85:D1:A6:1F:66
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:28:89:0f:03:09:c7:24:08:cc:24:eb:6f:7d:df:b5:c3:9f:
70:4e:cb:cf:dc:e6:b9:51:f6:e8:38:8c:1f:8c:de:cc:5b:c4:
7d:af:b5:58:53:5f:86:01:ed:17:37:1d:a9:8d:32:18:57:e2:
54:02:b5:67:c9:71:b3:20:3b:26:32:57:10:8c:0d:7a:cf:2e:
b0:98:ef:17:6f:c4:84:62:2f:25:59:cd:41:3e:7d:a2:9c:f9:
ea:57:ce:7b:77:21:0d:24:6b:ae:68:7b:0a:0c:1c:5e:d8:fe:
a5:3f:2a:b6:1b:d7:16:91:11:01:e6:e7:c4:9a:50:72:09:db:
58:14:bc:42:82:52:21:9e:32:e4:53:0d:4e:eb:35:17:0e:29:
3e:ec:31:9c:c2:75:8a:a5:57:29:4d:85:c9:ed:f5:b4:ba:65:
cc:88:bb:df:bd:96:ed:a1:c9:f1:e5:d9:67:e4:b5:91:4e:ad:
17:b2:53:e3:9c:89:a3:b0:77:75:1b:da:9d:20:af:0d:3c:c2:
49:b6:30:de:d2:ba:ce:84:c9:4f:e8:2c:80:88:9a:a1:11:69:
f7:d8:ad:59:55:83:37:95:dc:0b:74:2a:4a:cb:ec:55:38:42:
ee:62:a0:51:0c:b3:b8:0e:21:25:20:fe:7a:43:78:a3:25:c3:
3a:0b:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:37 2026 by rpki-client