Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 6Dt3jRXBo77EllNyX8ohnvrk7XsEIORosk7E1FM8Gws=
Subject key identifier: 30:1F:A0:76:52:50:25:39:54:CE:80:A2:AC:0F:45:D4:05:AC:AE:A3
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019CAC4720C07BF375BE3978F4988809C62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: yB0yV8oQHIAOfkiZ/Jd1wo/A07Q4nbIdxbsN85qGYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:20:c0:7b:f3:75:be:39:78:f4:98:88:09:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=301fa0765250253954ce80a2ac0f45d405acaea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:90:d8:18:94:38:c4:84:3b:23:c5:21:ef:
9b:68:d1:16:51:8e:15:55:d3:a1:0c:d8:3c:81:2a:
fd:7f:63:cf:f5:ce:f3:3b:0c:7e:ff:df:3e:e5:90:
7b:79:b4:ff:d6:dd:85:d3:bf:02:a2:02:16:8d:71:
db:c4:f7:90:b9:3a:fb:f1:7d:1d:4f:a2:63:e1:36:
fa:2a:c9:4b:0d:f0:e3:ea:2e:33:6b:b0:b6:65:86:
38:0b:b8:9a:ce:db:07:97:90:96:d4:b0:58:17:01:
25:2e:42:3c:fa:37:94:47:10:8e:36:5b:ed:70:0c:
9e:fa:37:97:16:0b:48:09:fd:6b:5b:3d:63:fe:15:
fa:7a:9f:19:5a:95:55:ff:68:fb:c0:4a:c0:af:4f:
14:04:32:32:8f:14:14:bc:ba:96:c4:9d:b4:bc:69:
d6:3a:8a:c0:49:f5:ce:4b:be:f8:12:e3:dc:3f:29:
a2:af:6c:2e:70:5e:5a:2d:41:85:41:aa:8f:1b:8a:
6f:4d:12:65:e0:e9:5d:e8:05:b7:f6:45:6e:70:78:
24:c8:72:e3:69:bf:22:6f:a9:49:1d:be:69:6b:bd:
76:4e:f8:0b:90:f7:7e:d3:f9:a3:96:c3:d9:28:b8:
b4:88:42:40:cb:6f:a9:62:b8:84:56:ed:78:26:13:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:A0:76:52:50:25:39:54:CE:80:A2:AC:0F:45:D4:05:AC:AE:A3
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:2c:35:a0:48:e5:ce:91:7e:32:9d:97:5f:b7:21:53:01:
ae:40:7f:8a:75:92:34:f4:98:d3:0b:af:b6:88:bb:c9:6f:ef:
7f:a8:f1:35:f6:a1:14:77:1b:c4:01:cb:0c:cd:1d:0a:ea:65:
7b:e3:e4:f6:11:07:3e:61:a6:29:e4:60:f6:2d:a7:0b:c1:6d:
64:d2:b1:be:b0:44:88:1c:2f:b2:da:86:5a:10:8c:4d:e7:93:
8a:66:ce:52:13:d0:55:de:17:c9:8b:a8:5c:11:03:81:f1:b9:
72:4a:b2:87:66:eb:96:71:7c:31:b9:e8:02:8a:c1:b9:d1:9c:
10:d2:d1:dd:00:78:07:ba:52:e9:7e:42:64:40:74:a7:b2:41:
eb:a2:31:8c:f9:78:be:89:6f:06:4c:88:8c:41:55:45:78:e1:
4f:a2:dc:75:46:2d:de:ca:f4:d8:54:33:c7:b1:d5:f1:2b:45:
9f:86:ac:e1:e8:3e:c8:46:73:bd:b8:9d:3b:7d:00:30:5b:b6:
b8:73:d3:6f:cd:82:c2:21:df:8a:41:ed:57:94:13:ad:81:d2:
63:7b:e8:f8:e8:f2:1b:10:a0:b2:24:4c:87:f8:45:99:c6:eb:
e8:69:62:cd:5d:99:3f:3e:85:b9:45:fc:08:c6:c0:32:22:a9:
57:6d:bf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:47 2026 by rpki-client