Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: Al/ZZuPASGtA55ppma/1XF/Wc/0cV7Gg2n1yYcb4KUw=
Subject key identifier: 8D:AE:D5:A5:06:89:F7:DB:19:6E:A8:BC:57:DB:B2:DA:2A:8E:F9:55
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01A12A31ED274783560B1831797F0DCA09B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 09:01:17 +0000
Manifest this update: Sun 11 Oct 2026 09:01:17 +0000
Manifest next update: Mon 12 Oct 2026 09:01:17 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: NGBXvumsxTtkYDTFO7NnPjkuKvHzwVEHaSSGYYgELPM=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:ed:27:47:83:56:0b:18:31:79:7f:0d:ca:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Oct 11 09:01:17 2026 GMT
Not After : Oct 12 09:01:17 2026 GMT
Subject: CN=8daed5a50689f7db196ea8bc57dbb2da2a8ef955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:7f:f8:31:0f:d4:77:90:9b:ca:ac:0b:76:
25:43:03:d1:81:cd:6a:9c:8f:48:f8:0e:51:65:cc:
96:e4:ab:0d:cb:e8:5e:6d:00:4d:66:2f:d3:3c:9b:
5c:30:33:84:dc:4a:00:c6:7a:59:0e:b8:63:a6:cf:
0c:00:4a:87:34:b0:20:5c:c2:57:c9:fd:70:be:14:
5c:99:2c:48:f6:b1:62:6b:77:56:bd:ac:cd:fb:b5:
c3:b3:3e:34:13:6b:e4:98:d1:89:79:cf:51:f5:77:
d8:d9:66:79:52:e1:cb:90:7a:bc:41:40:21:92:06:
85:4b:26:d8:81:ba:3f:94:09:77:85:a7:9e:93:a4:
ed:88:65:76:c2:c7:a7:25:25:23:91:f6:d0:76:d5:
bd:3e:93:48:62:04:b0:ea:9a:b5:d0:35:48:f2:ce:
49:90:5b:b9:ad:51:6b:23:09:96:3a:fc:fa:b2:48:
20:0c:bb:0c:b0:5d:79:95:72:cc:58:8d:ec:79:dc:
98:58:26:df:d7:33:23:f9:bb:1e:01:38:31:17:e7:
42:e3:d9:70:f9:3a:a6:c0:23:ca:ca:f7:93:a4:3b:
52:a2:19:41:52:89:d6:29:11:5d:3f:f5:fc:9a:22:
55:85:80:fe:b7:db:e1:c5:3b:91:11:31:68:06:80:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:D5:A5:06:89:F7:DB:19:6E:A8:BC:57:DB:B2:DA:2A:8E:F9:55
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:92:c2:92:20:13:53:0f:41:77:84:83:a8:75:56:b4:39:57:
98:8b:88:c1:a0:14:36:f3:42:16:b0:e8:d3:a6:a3:25:f5:b6:
fa:7f:93:6f:4d:84:aa:68:72:0a:a5:a8:e7:e0:8e:26:03:c1:
0b:29:47:a1:f4:75:62:bf:9b:e7:9b:22:6b:b7:8b:38:0c:4c:
40:c6:45:14:8b:92:89:01:64:d0:ff:b9:33:70:93:44:16:1a:
7f:4a:08:77:c6:85:fe:ee:83:4c:4a:b6:f8:83:70:71:95:1c:
15:18:c7:4a:e9:a4:62:35:43:0b:04:d6:20:c6:00:f0:e0:a8:
e1:08:43:a2:f0:5f:b7:5d:cf:b1:a6:47:90:67:33:1a:7c:e4:
61:b1:d5:e2:8d:ad:28:92:55:bb:a8:03:a1:98:ae:62:6b:7b:
d8:da:e2:7a:f3:f9:85:aa:dc:c2:97:2f:7e:8f:1a:4e:47:52:
d1:22:e2:99:6d:34:8a:06:22:95:b6:42:74:99:a3:88:65:01:
36:b1:fb:17:b5:5c:90:09:e1:8b:19:ff:8b:54:a3:79:94:a5:
ea:c4:61:c5:b1:4c:ea:c0:e3:9e:f8:a5:b1:66:f4:3c:71:e5:
03:d3:49:a4:4d:5d:2a:2b:18:e3:a8:7a:10:5b:02:11:ec:03:
d5:eb:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:58:44 2026 by rpki-client