Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: cQ1fVKSNk5N3ohCeBMmB525WpKFwTpAkTQ50pLL4QsA=
Subject key identifier: 3F:0D:01:88:7F:17:43:CD:D1:1D:54:57:B9:04:6F:7F:79:08:DC:D0
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019D382DEE9D87DD96EA625796AD1AB3952E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: riWEQx2gCvp60hKdNy6nEAFwXK0ApgUcKMcIuo7FONA=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ee:9d:87:dd:96:ea:62:57:96:ad:1a:b3:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=3f0d01887f1743cdd11d5457b9046f7f7908dcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:1f:a8:d7:89:ee:a4:c3:e5:7d:2f:42:ff:
70:be:a1:64:b8:66:01:f6:e1:43:a9:fb:fc:3b:7f:
e9:53:be:3c:25:10:48:1e:b4:21:91:f7:d6:ed:5b:
2c:51:83:34:26:a1:77:36:70:c1:ce:b4:db:af:90:
c2:40:15:1f:cb:ad:70:da:94:33:67:29:44:e0:80:
08:47:c9:50:60:66:23:6e:83:34:77:37:cc:8b:37:
d0:96:91:99:82:a7:84:fa:22:2e:2c:8d:6d:54:69:
2e:05:00:f2:10:f9:f8:f6:b8:5e:91:37:13:b8:3b:
21:e2:28:9e:22:e4:8e:f5:41:f6:a3:38:0f:36:08:
05:48:2e:15:b5:89:46:38:77:1d:08:ba:7a:a7:28:
03:bc:d9:f2:24:be:68:5c:39:8f:bf:e9:38:93:fb:
97:1b:3b:c1:9f:c8:b1:ce:09:24:9b:e7:61:5e:6d:
23:d4:c0:cc:da:f1:58:b4:f3:72:52:0a:26:a5:85:
c4:32:21:00:b1:7f:bf:81:d3:b3:69:7a:30:bb:cd:
0d:9e:f5:42:84:75:be:79:25:80:2c:42:c5:26:50:
3e:62:da:cf:43:d0:43:a3:91:7e:04:ca:db:8a:80:
ed:5d:b7:d3:ce:6b:fa:8a:6d:9d:0e:ba:11:69:fb:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0D:01:88:7F:17:43:CD:D1:1D:54:57:B9:04:6F:7F:79:08:DC:D0
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fe:56:0f:dc:10:73:fe:a3:af:9e:48:be:54:cf:97:89:0b:
65:31:13:d1:21:96:37:a2:5e:e4:e5:c4:10:54:8f:b7:92:bd:
71:b6:f8:a0:45:87:f3:96:b7:23:e2:64:f7:b5:14:a8:91:c4:
46:e9:3c:ce:36:96:d8:2f:30:41:cf:78:40:cd:54:73:6e:3b:
1b:a1:05:0e:78:f4:67:76:24:8c:74:a7:5d:a9:46:af:c5:d3:
9f:46:3d:61:8b:13:d2:fb:04:15:91:af:9c:6a:00:65:80:6b:
e0:be:3a:31:eb:fa:4f:6a:ff:d1:45:16:2f:1b:88:7a:9d:7b:
7e:fc:2a:a5:71:05:a2:1b:a1:84:a6:39:58:9b:0d:48:83:5e:
10:4d:9e:2e:85:94:23:bc:6a:1b:27:7f:77:16:74:3d:75:81:
22:36:b8:d0:fc:06:9c:b4:2c:b9:98:5c:c0:22:96:ef:c4:d3:
bd:59:25:ab:92:a4:14:ce:46:cd:cd:6f:63:1c:f0:d3:41:3e:
52:3f:38:f4:66:8d:78:90:45:38:f6:4a:ea:6c:b5:46:b9:44:
49:1b:49:54:05:ef:0b:f2:17:e6:5b:8d:90:43:34:d2:8b:1c:
66:b9:4b:91:ad:f5:02:85:d2:ea:29:0d:c2:d9:dd:16:33:30:
7f:e2:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:34 2026 by rpki-client