Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: bJjjDASCKWdwb6qSv1o83393JN4aLKEuJj9uS4s+ARI=
Subject key identifier: 8E:E2:BD:2B:62:AA:74:BF:07:02:6C:DC:90:A2:76:01:E4:14:E5:38
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019DCD1927BAEF35B67005A009EFC9207872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:01:10 +0000
Manifest this update: Mon 27 Apr 2026 04:01:10 +0000
Manifest next update: Tue 28 Apr 2026 04:01:10 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: 6Y59OkbCEhnBkvMTn6fha0nXp0Ga/TTSCB9gj6CDApE=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:27:ba:ef:35:b6:70:05:a0:09:ef:c9:20:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Apr 27 04:01:10 2026 GMT
Not After : Apr 28 04:01:10 2026 GMT
Subject: CN=8ee2bd2b62aa74bf07026cdc90a27601e414e538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:ac:72:d9:00:52:63:93:07:11:23:37:62:
65:e1:e5:3f:6c:af:ad:f8:13:f7:c0:94:f6:cc:af:
aa:8f:9a:f4:2b:43:bf:2a:fd:01:d4:10:80:82:90:
ef:bc:83:3c:c3:79:62:64:ec:50:2b:b0:f7:fe:23:
39:24:28:c3:fd:dd:a1:3f:3d:63:6e:5a:d7:55:2f:
3f:3d:02:61:7f:4c:02:92:c7:fe:3a:63:76:7b:8b:
67:aa:9f:79:3a:41:44:67:12:eb:28:52:a6:b8:04:
13:f2:be:00:ec:d4:33:f2:b3:d4:f6:ea:53:27:06:
f5:fa:fa:66:fb:5c:ed:d5:17:b1:d1:78:d6:1b:b3:
51:07:20:fc:b7:50:45:ee:a0:2e:48:29:60:90:da:
0b:0d:82:2c:ce:9a:e5:24:2b:9b:8d:72:57:58:30:
2f:37:62:d5:ea:39:f3:af:5e:ef:ea:9b:bd:78:76:
b6:16:1e:55:cf:64:bd:cd:62:b7:0b:77:1b:a3:d1:
c1:b6:f7:11:62:16:1e:20:c4:23:a7:0c:75:bb:5b:
5a:6a:95:5a:7f:8d:57:ac:cb:a6:5e:ef:60:32:dc:
f7:39:08:ed:ad:e4:38:7e:fc:a0:46:27:3e:ee:83:
35:51:67:cb:ee:5c:d8:86:9c:0f:55:80:70:b2:98:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:BD:2B:62:AA:74:BF:07:02:6C:DC:90:A2:76:01:E4:14:E5:38
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:77:23:cc:c2:c2:27:24:5a:a5:c3:a1:99:75:96:bf:46:
ca:1e:8a:9c:12:7e:49:3d:b1:c8:0a:9f:13:53:91:42:a6:06:
a9:50:2b:f7:98:97:28:0a:ee:92:eb:43:43:41:a6:cc:1b:ee:
a2:01:0c:6c:65:51:62:c7:ea:9e:62:e7:08:9f:c8:f7:35:01:
c4:95:ab:b0:8f:5c:4f:bf:79:e5:eb:9c:1b:4f:56:72:cc:06:
6f:9e:62:39:24:47:6b:a3:43:39:b8:d2:3d:30:d7:f6:1c:1f:
e1:29:fa:f1:4f:66:55:67:68:3f:b9:57:bc:a5:4f:0c:04:14:
db:de:7b:69:61:f0:fd:1b:1f:06:41:62:b7:2e:85:33:9c:87:
f1:a2:e1:ae:92:5a:a2:00:e9:72:c3:96:e4:d8:f2:7d:c5:bc:
46:34:5c:64:05:fc:5d:f6:11:c3:95:a9:e1:ba:db:47:95:bb:
9c:ec:69:6d:8c:6a:e3:62:a5:59:07:e2:e8:ef:8e:b3:52:30:
cf:89:59:1b:03:36:53:f4:03:9a:47:e8:e4:3e:d6:c3:6d:8a:
b6:ab:1c:dc:df:c0:b9:56:fb:4c:0f:c6:10:12:15:39:d9:23:
5d:5d:eb:af:8a:2f:c1:ea:a3:3b:fe:4b:89:24:8c:ba:18:a0:
97:ac:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:19:50 2026 by rpki-client