Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: OBRAEw8UMvRu6LZt8qLr2lgRH0QJ6rI2l703DPhmcQ8=
Subject key identifier: 1E:A9:7F:F6:E1:AC:97:FF:E9:8F:7A:19:A2:6D:15:5E:0D:83:DE:34
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01A000CA6BFEB5BB4A2CD98B6D769C7B2EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 15:01:00 +0000
Manifest this update: Fri 14 Aug 2026 15:01:00 +0000
Manifest next update: Sat 15 Aug 2026 15:01:00 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: iqBggiia/+DvlD00K9LR2XnIbsVGUplYPFyI9WQfDLg=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:6b:fe:b5:bb:4a:2c:d9:8b:6d:76:9c:7b:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Aug 14 15:01:00 2026 GMT
Not After : Aug 15 15:01:00 2026 GMT
Subject: CN=1ea97ff6e1ac97ffe98f7a19a26d155e0d83de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:36:50:13:3a:49:bf:db:89:e5:e9:a2:bc:
09:9a:e5:be:1d:85:7b:83:bc:6d:dd:13:2c:f1:87:
0e:a7:bc:37:89:01:21:eb:2c:d2:f4:1e:6f:9f:c1:
19:31:4e:e7:e0:0e:0f:0d:ba:8b:dc:3e:8a:a8:aa:
3a:3b:fe:58:b3:c1:a2:d3:3f:b3:53:c7:3c:e4:5c:
21:9a:d7:e8:b2:5a:d5:d1:a9:9b:ef:a7:e5:24:e1:
aa:c5:43:98:0b:89:82:6e:49:78:9a:e9:fc:3b:f1:
26:97:0a:05:40:8b:cf:e2:aa:91:d4:1c:b5:60:2d:
5f:73:44:f7:b0:9d:c6:fe:57:a0:e7:88:9a:50:c3:
2a:5f:32:9f:3d:9f:ba:9c:3c:4d:04:cd:fe:60:11:
bb:62:53:0b:20:ff:83:84:0c:fb:9b:ee:a0:db:f9:
64:3e:64:d0:36:34:84:05:12:18:d5:dc:5a:dc:d6:
39:ce:59:32:48:aa:57:17:27:c4:d9:fe:c8:2f:1a:
78:4e:f5:0d:b8:df:f8:a9:d2:d0:5a:0e:fe:a5:bf:
96:c7:5b:e7:a4:dc:9e:66:01:e4:49:8f:30:19:56:
6d:f8:24:fe:81:ef:41:4c:14:5a:15:6b:4c:2c:ad:
bc:1f:30:9f:6c:68:eb:5f:fd:c2:7b:a8:37:fb:b1:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A9:7F:F6:E1:AC:97:FF:E9:8F:7A:19:A2:6D:15:5E:0D:83:DE:34
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:82:c4:f5:03:cf:82:a8:1f:6b:a4:2e:0c:04:ed:e2:82:46:
98:ee:51:27:fe:ce:d3:a4:05:d6:80:54:86:ae:9f:12:e6:3a:
ca:e7:5f:8c:23:1d:a1:a4:38:bc:e7:b2:2a:da:55:76:cd:62:
a6:60:58:e2:9c:10:c8:01:dc:f0:79:fd:c9:cc:2b:bc:38:54:
82:f3:40:3c:e6:b1:c5:5f:9c:df:dd:3e:d5:84:e3:72:c6:08:
c7:e1:4f:60:f5:22:f8:03:0c:24:fd:c2:41:38:95:4c:79:38:
1f:82:e0:fa:01:27:5b:c8:f4:91:12:cf:60:d0:89:ac:18:b1:
23:67:93:ee:c6:52:f3:b3:08:a1:d2:11:91:6a:2c:ba:74:a6:
d9:52:f4:9b:7a:11:8d:b1:e3:d3:30:32:25:a6:ee:f4:27:2a:
3d:84:15:df:2a:fc:54:06:db:03:97:ce:89:32:40:ce:89:30:
ed:7c:9b:70:4b:dd:90:50:3b:bf:7c:46:46:e3:c2:0f:fb:42:
25:9b:80:f1:18:a6:bb:dc:df:20:6b:fe:fc:e9:76:89:bc:0d:
ba:4a:0f:cd:b3:bf:d8:13:ae:4d:09:7c:14:9c:1d:6b:de:f4:
00:eb:ab:87:29:68:ee:88:40:d9:fa:dd:ee:cb:2c:d1:f2:3d:
82:7f:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:18 2026 by rpki-client