Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: QCMob7Xi44oU3tlkBveWg9HKIM5FqRWUHuumEYEL3ak=
Subject key identifier: ED:8E:B6:85:21:0F:47:E6:C7:9D:FA:07:3A:0D:32:33:6D:13:C4:1C
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019DD19A8EB1D9939FB29B8E21CCB8D228A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0F73
Signing time: Tue 28 Apr 2026 01:01:00 +0000
Manifest this update: Tue 28 Apr 2026 01:01:00 +0000
Manifest next update: Wed 29 Apr 2026 01:01:00 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: /trmdFXzWK2VNjEKXkD/RM8kP1P52xYNZ7ZDfY9XGOI=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:8e:b1:d9:93:9f:b2:9b:8e:21:cc:b8:d2:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Apr 28 01:01:00 2026 GMT
Not After : Apr 29 01:01:00 2026 GMT
Subject: CN=ed8eb685210f47e6c79dfa073a0d32336d13c41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:8a:4d:36:d9:39:c5:46:a7:73:e1:cd:62:
c8:d9:f8:42:b8:7e:fd:5f:db:de:15:59:95:38:49:
08:00:a4:9c:aa:f4:11:bb:02:1a:54:32:15:53:9a:
d7:e6:ea:14:ff:99:75:8b:7d:b0:bc:32:88:5c:4c:
ac:38:58:7d:20:8f:94:72:94:e9:8c:31:e4:94:1a:
c2:07:b0:a9:93:ca:b6:1c:c4:0b:46:6a:01:0c:23:
6f:29:b9:8f:e1:d7:65:ce:bb:19:6b:8e:8e:aa:ac:
41:4c:f4:bc:84:9b:e7:5d:c0:8f:6c:5d:39:12:7c:
8d:99:16:9b:13:06:ca:41:4e:f6:35:06:1f:3f:18:
d7:77:70:15:7b:fc:ad:50:14:1c:3e:a4:f7:d6:ec:
5a:06:4b:e2:74:87:fd:57:a5:2f:6d:e6:0f:29:61:
47:62:5a:de:c9:c7:b5:7e:b6:77:71:38:8c:ec:e0:
7d:a8:13:3c:0b:79:7c:f1:c5:b6:18:1b:b9:b1:c2:
f8:13:2c:bf:b4:a5:96:4a:95:cb:11:e4:0d:ae:73:
e4:1c:47:4d:13:8d:a0:dd:1f:29:cf:ba:8c:cc:28:
59:36:da:85:54:52:d2:85:c6:bf:49:4a:9c:a1:fd:
c4:25:6a:cc:b7:ad:a4:9f:29:c3:8b:04:2d:2c:db:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:B6:85:21:0F:47:E6:C7:9D:FA:07:3A:0D:32:33:6D:13:C4:1C
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:76:39:bf:3f:10:f0:5b:5f:13:82:45:c7:76:9f:eb:a4:01:
3b:cf:50:3e:8c:f1:e9:3a:7a:63:fb:1d:4a:d6:18:e9:c9:f9:
f7:b1:f1:85:46:3e:c0:b3:a1:39:2d:e7:71:f8:a0:9d:0b:bc:
91:80:c1:a7:8b:f9:e5:bd:28:41:6d:f1:29:c0:5c:84:a1:fd:
29:65:94:0c:ee:82:97:c6:ae:59:4c:14:96:72:0c:b0:13:45:
c6:31:c0:a4:4d:87:81:a8:2b:7d:93:af:dc:0f:1d:f1:0d:7f:
fb:2e:ce:7e:61:f2:dd:3a:65:cf:9f:f5:83:4c:52:ad:52:e5:
43:2d:a2:e2:dd:b4:b7:67:a4:7c:9f:d1:1a:b1:00:ed:75:48:
90:dc:a0:14:f8:9a:03:7c:a9:a5:bc:6d:99:c1:5a:23:d4:70:
f2:ce:5e:fb:42:e9:96:ed:4d:f5:f1:11:c4:e7:75:b6:38:51:
4e:8e:b7:0e:cf:63:01:b4:3e:95:d0:64:27:81:8e:27:ed:0a:
e3:0a:2b:da:7a:ce:f9:1d:ba:a7:4f:2c:11:59:1d:10:54:61:
41:28:19:86:b9:13:a0:00:e5:30:35:b5:d8:15:a4:8f:2f:b9:
b7:4f:1d:b4:25:b5:44:e7:86:90:18:a5:14:60:4c:5a:b7:32:
ba:f7:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:05 2026 by rpki-client