Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: qGesiCEMGwtaJ7QC83a6/NwbY5dfn7I2MSyuxOblhl8=
Subject key identifier: 84:5A:E0:79:BA:8E:AD:6E:D7:6F:54:AA:D9:D0:21:1C:18:B8:CB:FD
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 019D382DE575D37F80198D0AFBD3AB581076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 11EC
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: ysu7YKQDI8IKzwVqnHMrDLXZNl/4+xk2dvvAgf9fdKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e5:75:d3:7f:80:19:8d:0a:fb:d3:ab:58:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=845ae079ba8ead6ed76f54aad9d0211c18b8cbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:ee:5d:e9:1a:b1:21:00:67:d8:40:f2:72:
bb:20:de:c9:64:af:dc:bd:4d:e4:4a:20:c6:57:05:
57:d3:3a:f1:a7:b9:d5:0b:ed:ae:8f:d4:fd:a0:c7:
73:9c:1e:6e:91:87:2f:44:2b:5e:a3:b8:e1:27:7b:
84:f7:eb:3e:d5:49:03:06:65:3c:89:63:16:cf:63:
6b:4d:82:d5:ce:14:10:fb:ba:00:2d:80:57:05:bc:
ed:cc:1e:6e:ca:5e:c7:92:ac:d9:ca:a4:4f:8b:7e:
13:8b:c2:4a:17:5f:d6:30:ae:1f:ca:6a:6b:b0:50:
08:2c:46:a3:83:0e:f6:24:5c:b5:28:f6:a5:bd:f0:
df:d7:e4:e1:00:62:02:23:34:bd:bb:91:20:c2:76:
b5:b6:3f:21:11:b1:90:25:21:dc:ec:ac:c4:49:3f:
e9:b0:2b:07:8e:c3:2e:ca:e7:bd:02:0c:ff:b5:a4:
72:c7:7c:5c:f0:35:b6:a4:ab:5a:01:ab:0b:dc:e0:
36:c6:80:92:af:46:20:af:29:cf:6d:3b:a2:31:bd:
66:e6:09:e3:bd:86:7c:90:87:35:4e:d2:6e:92:83:
4d:76:4d:42:cb:9a:a6:8e:b0:cf:42:b2:a7:1f:db:
66:20:c0:1d:c6:35:6a:fd:94:02:02:be:72:87:42:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:E0:79:BA:8E:AD:6E:D7:6F:54:AA:D9:D0:21:1C:18:B8:CB:FD
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7d:fa:15:82:4f:30:c2:09:57:9b:14:ab:07:af:3a:7f:9e:
5d:dc:75:4b:f2:26:aa:f5:ab:9d:97:8c:b6:fc:0f:00:73:9b:
44:34:2c:01:44:8b:e1:0d:b8:e9:09:64:7a:d8:15:6b:6b:f9:
9f:b6:f9:d6:af:8e:56:ef:fd:3a:5e:85:68:66:9b:1c:80:fa:
15:af:d7:e9:e5:7d:c6:23:4d:95:b0:5e:74:9b:61:ab:92:06:
ba:90:7d:28:09:3d:12:15:9b:ea:9f:da:26:c5:a9:66:1b:8a:
55:1c:c2:02:d8:e9:39:3b:ae:e8:e2:e4:5d:df:38:db:20:06:
30:a4:08:06:18:b1:9a:b6:4d:59:ff:3c:9d:ec:87:aa:78:6c:
75:d9:ce:e0:3d:b6:09:84:06:9b:16:ec:f5:49:f0:fc:a9:16:
b5:5d:62:f8:30:3b:a2:6c:fe:34:d1:00:33:ac:c8:73:7e:99:
de:6b:6f:c1:bd:fd:4d:01:0a:c3:c4:0c:be:4f:a5:9b:fe:eb:
e8:a7:75:79:bb:1c:69:40:d1:39:27:38:eb:9f:4d:67:ad:16:
b2:34:af:5d:ca:eb:9f:2c:de:66:bb:df:92:39:be:d2:49:3e:
fe:e7:59:a0:cc:b5:ed:4c:8a:48:4b:c4:8a:6b:95:d6:2a:23:
5e:51:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client