Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: UHDf0xYuNMArhoDoAS1BhhEwhj6ht7WV0ABHlQblqfg=
Subject key identifier: EA:AD:A6:B5:B1:E9:5A:DD:4C:C6:B4:D1:EC:AB:66:83:65:FC:D9:C4
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019D39413631D160CB58B2B74ECCEF8F675F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: b3m/Erz4Xy4dRSmlHdKopoqDfv0WpXhhddpL0c1dXyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:36:31:d1:60:cb:58:b2:b7:4e:cc:ef:8f:67:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=eaada6b5b1e95add4cc6b4d1ecab668365fcd9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:f9:5f:0b:fb:a4:1f:45:a0:b0:3a:4e:a4:
a2:08:0d:59:ce:74:61:e3:7e:9b:77:28:64:2e:f4:
a8:03:05:05:88:a2:b3:c8:58:83:4d:7b:ba:92:c2:
d2:4d:51:c3:7d:83:12:2d:38:d0:c8:97:88:19:5c:
27:6d:78:a5:80:cb:f7:a0:2c:43:7d:4a:06:29:c6:
4f:7d:f1:45:2d:2e:19:3c:70:c2:cd:81:e6:99:20:
60:3c:9b:dd:e7:21:4a:31:3d:48:f4:c0:10:cd:b4:
86:cf:4c:67:21:02:c9:56:9d:a0:1d:8c:24:69:62:
cc:eb:cb:ea:fc:95:42:21:01:31:39:ef:2f:52:29:
d8:b8:b2:72:22:61:a1:d7:6c:bb:7e:6e:f0:be:88:
16:55:c8:8d:f0:ab:85:97:49:39:02:5c:63:f7:d9:
05:17:53:f4:dc:3d:e2:e9:3e:38:74:5c:00:9d:10:
74:91:22:71:0d:c6:56:cf:bb:d8:b3:a0:6f:1d:e1:
36:27:a6:17:0c:81:17:10:21:22:3c:bd:98:34:e1:
40:01:3e:cc:1e:3d:ce:5e:f3:c3:0a:d6:af:42:87:
ea:f8:ab:3e:30:8d:49:c1:ec:20:6e:cc:53:ea:83:
8d:9e:48:60:d3:01:a9:28:9c:bc:de:b1:59:4f:a3:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:A6:B5:B1:E9:5A:DD:4C:C6:B4:D1:EC:AB:66:83:65:FC:D9:C4
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:8c:75:51:7a:d9:05:b4:a3:e8:9f:77:3b:68:7a:11:18:
19:b4:7a:ef:a5:cd:db:eb:60:fb:4c:98:92:e1:41:a4:25:34:
f9:17:e2:84:b3:26:ed:c2:e5:90:14:fb:61:b1:ca:f8:f4:ea:
d8:91:d2:52:c6:9d:97:87:d0:eb:e4:be:0a:0d:f5:93:5f:a0:
be:95:60:dd:fd:40:76:51:5b:77:75:64:f0:c8:21:08:ee:04:
01:cf:dc:8f:98:02:e1:a7:56:ff:f1:e8:d0:73:c9:7c:1a:38:
67:bc:b6:db:e4:99:e4:28:19:85:b6:20:65:10:61:79:68:d7:
69:ea:63:e2:1f:d1:28:de:f8:93:53:e0:65:ae:64:2f:d8:15:
c0:eb:d1:f6:c7:46:20:59:ff:a6:a7:5a:07:a3:87:c0:02:66:
9a:6e:b4:fe:7c:d2:d2:04:80:a1:e7:8a:4f:96:a2:5f:6b:ef:
b2:cd:4e:82:57:a5:c8:dc:1c:86:68:7e:ea:e6:ac:df:3f:bc:
ab:4e:b4:2a:e6:72:0d:cc:ff:fa:0a:41:44:b3:fe:3a:35:b4:
6b:3e:a8:41:40:77:0a:95:39:45:aa:26:c7:52:18:a8:b6:1b:
92:43:b4:0f:02:8b:7f:2b:b6:f1:13:3e:19:02:0c:da:59:0a:
fe:dc:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:09 2026 by rpki-client