Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: DuZrfxsLffBdNLjLeEmUdYnStLe7jIlE5JFGAy3N0BQ=
Subject key identifier: 2A:75:5B:21:E3:1B:11:43:8C:03:4D:EF:1D:63:57:08:CB:C7:99:E0
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019CAAC6C9B49C30F98D29B06E3CE11507C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: R1wUUXbriOLQC9xSb/LZ7uGM8FfsF/sDA7yn1N5TPNQ=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c9:b4:9c:30:f9:8d:29:b0:6e:3c:e1:15:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=2a755b21e31b11438c034def1d635708cbc799e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:e3:3d:e3:e2:c2:cd:3b:52:91:0e:05:25:
24:b7:37:89:1d:e1:ec:67:79:40:98:8c:92:bb:7a:
86:f7:0d:7f:83:a5:51:91:39:39:ec:01:44:bd:4b:
02:3a:4b:28:3b:60:c0:9f:17:43:07:ad:81:48:6d:
68:ef:bd:0e:d8:4a:f8:0f:8b:de:49:21:63:47:80:
7a:9f:2f:df:b8:27:b8:eb:ac:2a:c6:b8:ba:7f:3a:
c4:5c:b3:15:d0:60:d2:22:f4:ff:c5:57:2d:b2:67:
74:2a:f5:11:ad:af:11:85:3c:5d:b8:7b:f2:4c:f6:
dd:8d:d0:0d:ff:de:ca:84:5e:7c:a7:54:a5:90:fe:
e9:da:af:48:33:33:99:a4:39:ff:37:78:50:c7:d0:
e2:5c:5e:d8:16:5e:50:91:77:43:b4:de:bb:a6:80:
2c:c7:57:98:90:cd:d5:2b:50:29:b9:c3:28:7d:3c:
ad:37:f1:d3:14:5a:6c:2c:a8:d1:5c:68:ac:10:81:
ff:a9:fa:dd:51:fd:d7:51:4a:12:03:b3:15:cf:50:
19:30:02:a6:1a:07:d1:88:f1:f0:da:dc:48:8c:62:
d8:c0:b0:91:1f:0f:9b:9e:73:d8:b6:7f:2c:1a:33:
12:fc:19:c6:64:91:3b:9c:d4:cd:73:50:0f:30:9b:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:5B:21:E3:1B:11:43:8C:03:4D:EF:1D:63:57:08:CB:C7:99:E0
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:89:77:88:09:22:cf:58:c0:ac:95:fd:94:7c:0f:c0:1e:99:
5a:17:34:d1:16:b0:84:a8:7a:3b:97:f5:94:f9:90:1f:38:aa:
3e:d1:7d:97:f9:c8:53:a7:45:e0:ea:30:df:94:97:60:61:69:
9e:51:a9:e3:11:65:be:92:76:9b:db:ce:7f:72:88:dd:34:4f:
0a:3c:8e:d1:6c:f9:c1:34:f2:0b:17:cd:c2:a7:31:bb:75:ad:
05:96:ef:7c:2c:66:c9:f0:59:e9:7d:04:20:41:4b:ab:94:3e:
72:73:47:19:d9:53:a9:be:22:9d:74:dc:89:89:6b:b6:09:15:
ad:69:15:0f:ef:44:e9:61:26:ae:5c:c6:92:5e:f7:10:4b:90:
23:d4:62:74:5d:79:ec:c0:d4:c2:16:d9:51:75:f2:f8:88:2d:
25:ac:fa:64:13:00:50:b2:62:4a:c7:99:8f:2f:ea:18:c9:f2:
36:7c:1c:08:f9:f9:f8:5b:4f:f2:f4:1d:81:11:a8:76:ef:6d:
f9:78:08:c4:86:20:39:11:a8:cc:fe:68:7d:c8:9b:1f:ed:03:
6e:c3:23:ad:6a:54:98:92:fe:64:50:e1:c9:c3:85:49:8f:36:
e5:72:9f:c2:4f:e7:9f:9a:f3:df:65:42:25:6e:4e:f0:35:cd:
2d:88:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:35 2026 by rpki-client