Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: VcDxpZRoMmxUU7aZq6Ux1LD8+X/99eu7CZJb3pOKWwg=
Subject key identifier: 53:E8:D9:7E:6B:E6:ED:76:C3:BF:38:BE:A7:D3:0F:C5:3B:0C:FD:11
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019DCF0715EA4FA5588B5449E1CCDFE04033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: F5
Signing time: Mon 27 Apr 2026 13:00:41 +0000
Manifest this update: Mon 27 Apr 2026 13:00:41 +0000
Manifest next update: Tue 28 Apr 2026 13:00:41 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: VBQLqSyPqMShtlBfnd7SD3eQcA46/zyauWOCu2+41rQ=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:15:ea:4f:a5:58:8b:54:49:e1:cc:df:e0:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Apr 27 13:00:41 2026 GMT
Not After : Apr 28 13:00:41 2026 GMT
Subject: CN=53e8d97e6be6ed76c3bf38bea7d30fc53b0cfd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:e9:bf:eb:fb:09:9e:1a:85:a8:34:b1:d2:
15:42:1b:b3:8b:4e:0a:34:cc:2b:90:48:48:00:5f:
e4:d6:14:ff:5b:8d:f5:3a:ae:97:e8:26:e7:f8:5e:
c0:3e:69:8b:3c:62:d4:21:fd:33:46:40:1a:c7:e5:
d2:8f:d2:bc:b0:95:b7:1f:31:a6:6f:ab:f2:fb:a1:
9f:77:8e:de:03:c5:14:ce:ff:36:cd:44:2f:09:df:
00:5c:fa:dd:3f:26:db:6b:20:98:3a:6f:6a:ac:fc:
50:da:dc:11:c6:a4:12:1f:36:d2:44:37:9e:10:1d:
c9:78:69:44:3d:2e:fa:45:f9:59:8b:d5:96:e8:b0:
38:15:3d:9f:2a:d5:93:68:ae:fd:4f:b6:c6:a8:ed:
82:92:ac:f9:55:16:20:d1:ce:7d:51:6e:b7:48:44:
d0:81:19:13:68:f1:09:63:d2:2b:63:1b:e1:5b:d2:
d2:25:d3:11:5f:21:ed:85:fe:96:12:04:3d:49:17:
d1:bd:12:f9:64:a5:fd:b8:6c:eb:3e:fe:78:dd:23:
49:d0:67:0d:69:9b:eb:ce:15:d4:4f:7d:22:2a:13:
33:b5:5d:dc:54:cf:80:d3:2b:69:ca:e0:18:fd:7b:
5d:94:c1:56:c7:cc:dd:da:cc:18:b2:22:09:95:bd:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:D9:7E:6B:E6:ED:76:C3:BF:38:BE:A7:D3:0F:C5:3B:0C:FD:11
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:16:ad:11:d6:5b:4c:ae:46:77:5f:5a:9c:00:e4:d0:90:
1a:88:74:69:ea:a1:41:b6:93:eb:14:3e:4e:af:7d:32:e8:5f:
d9:d0:e0:97:0c:c4:5f:b6:2b:f1:c1:4f:4d:cc:65:8a:64:bf:
1f:cd:95:81:f1:57:52:98:d0:1a:87:a6:b3:ff:87:f0:5f:54:
89:c4:73:8c:d6:75:d3:27:f5:59:fb:c0:e8:60:f4:ee:bc:b7:
83:14:17:18:b2:0f:2b:37:60:74:e9:a1:a6:0c:11:e4:4b:60:
35:c1:23:56:55:93:60:3b:23:5d:bd:43:a0:37:19:ea:20:29:
09:3e:19:87:ce:63:41:4a:ec:c6:d5:9a:05:91:c6:5f:0a:61:
1b:8b:b1:fc:c8:a1:51:2e:2b:41:a3:0f:82:44:68:7a:44:c4:
75:85:dd:60:08:d2:52:2b:2c:92:2d:7b:2a:f0:57:05:73:78:
1e:84:0c:6a:96:ef:26:7a:f2:42:48:a0:f2:ec:4a:0b:27:cc:
64:6b:12:71:c2:c7:d4:5e:e9:78:ee:3f:89:39:52:65:ee:5e:
2f:d4:9e:ec:55:34:63:11:9d:19:20:e2:d5:43:28:b8:3a:65:
bc:37:8f:99:4f:c1:73:d6:b4:18:d2:96:61:39:54:ef:e0:56:
c4:c9:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:52 2026 by rpki-client