Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: nJawPsxRaVj1pD4AO5zMBnIC8OtX0UfC8Qa/lNUehvM=
Subject key identifier: 4D:04:5D:21:E2:28:28:47:6A:5D:0C:BE:A6:CE:7B:3A:A3:2D:1D:4B
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019DA7F9CEA890D60464C73D7D5F16AF5176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 01B6
Signing time: Sun 19 Apr 2026 23:00:59 +0000
Manifest this update: Sun 19 Apr 2026 23:00:59 +0000
Manifest next update: Mon 20 Apr 2026 23:00:59 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: szTBaDcuaN2g27+uSCtPHQxb58YuF2Vop57M0GtzL10=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:ce:a8:90:d6:04:64:c7:3d:7d:5f:16:af:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Apr 19 23:00:59 2026 GMT
Not After : Apr 20 23:00:59 2026 GMT
Subject: CN=4d045d21e22828476a5d0cbea6ce7b3aa32d1d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:da:27:2a:49:42:bd:6e:90:6d:dc:32:cd:
6d:96:cd:48:16:58:c1:c7:c3:84:4c:6c:6a:39:41:
7a:95:cc:03:f4:f5:07:0c:93:0e:01:ec:51:93:cb:
f8:74:16:41:e6:ec:d1:c5:71:22:3f:d7:5d:9b:f8:
84:9a:0f:d7:a7:af:ee:a4:3d:7b:9a:0c:ce:32:0a:
96:ad:f8:67:13:7b:75:ce:95:f9:11:be:b2:6d:86:
c7:c4:be:10:b4:2b:6c:bc:14:76:ad:87:3c:35:88:
e2:61:d1:67:ea:c6:c8:4b:ed:81:f3:8a:67:82:52:
a0:47:74:a9:32:aa:8b:39:d9:5d:3f:41:4a:f6:9f:
84:b0:68:0c:cd:4c:a3:52:56:27:3e:91:6c:fa:7c:
81:73:77:28:12:66:26:8d:69:64:c8:7a:8f:56:74:
75:e3:f1:af:55:db:46:97:c5:e0:a0:f7:f7:50:e9:
24:29:fd:da:11:a5:02:20:52:45:f1:05:b8:a8:a8:
ff:8a:94:93:eb:00:06:88:d5:36:98:21:70:f0:c2:
dd:d8:24:19:26:36:b0:a4:82:58:2e:a4:f5:de:2a:
e7:04:fd:ba:a0:94:d4:8e:35:dc:d1:31:28:32:3a:
c7:58:d8:7d:d1:e5:5e:d2:cf:71:28:6d:f8:cb:fa:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:5D:21:E2:28:28:47:6A:5D:0C:BE:A6:CE:7B:3A:A3:2D:1D:4B
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:60:9c:6d:26:f3:a4:12:d8:6e:dd:64:3c:06:49:30:ff:a7:
fa:1b:f7:e8:28:8a:0b:15:05:15:19:98:c5:a7:5b:b7:6c:1a:
0b:25:22:df:ae:7c:73:5d:0c:8b:c8:51:24:64:02:5a:b4:d6:
31:7a:95:66:e6:eb:84:89:2b:99:87:f5:de:6c:83:23:ef:9e:
c1:f4:fe:a8:0a:71:b7:10:a6:c7:be:22:c4:b9:0f:33:8d:89:
cd:30:a1:3f:02:01:d1:16:1f:27:e0:09:51:59:f0:10:6d:41:
c0:54:73:4d:4d:a9:99:38:0d:88:4c:9e:29:54:06:1b:28:c7:
f0:73:f3:d4:c7:bc:ea:b5:73:30:1c:56:7c:27:68:8e:2f:b2:
a6:72:49:21:b3:b1:31:ac:2d:b5:44:9e:ca:b7:b3:f5:c9:69:
2c:83:2f:f9:5f:bd:70:ba:8f:0b:f4:df:2c:83:8e:0c:56:1f:
cc:9e:b7:03:90:a3:c0:8e:65:a8:2d:43:56:0d:4e:de:8c:e4:
83:91:10:59:29:e8:db:20:01:0a:af:bb:23:29:31:4e:06:42:
80:c8:4f:a3:86:8c:54:a1:d7:8c:6f:b6:a7:9e:d4:a5:d9:24:
0c:71:96:0e:67:5e:0c:29:c8:fe:eb:b9:a5:0c:ee:90:cc:82:
0c:cf:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:55 2026 by rpki-client