Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: pBSFIHlmY08sjT5UIjxWpXws78wqlb3MnT1okmBSX4Y=
Subject key identifier: DC:02:06:B8:2A:DE:36:E6:7F:57:AF:72:5A:A4:AD:89:5B:4E:E6:49
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019E2995039C93FC89F3B714257FDA558709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1912
Signing time: Fri 15 May 2026 03:01:32 +0000
Manifest this update: Fri 15 May 2026 03:01:32 +0000
Manifest next update: Sat 16 May 2026 03:01:32 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: Tud6H4To8XwqRhhq/J19R489Nh1pfcxJmDs+nWXEDGQ=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:95:03:9c:93:fc:89:f3:b7:14:25:7f:da:55:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: May 15 03:01:32 2026 GMT
Not After : May 16 03:01:32 2026 GMT
Subject: CN=dc0206b82ade36e67f57af725aa4ad895b4ee649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:f8:1d:af:88:24:bb:9b:fd:2a:43:1c:71:
b1:7a:6a:4a:c3:5b:0d:33:b6:b2:f3:67:17:ef:66:
48:19:4d:2b:95:a6:62:95:1d:aa:68:48:ab:b0:12:
a3:7e:01:4c:b7:af:45:88:25:ee:79:3d:6c:64:b0:
f2:47:19:b1:1c:61:6d:45:c4:0a:c7:f0:35:59:de:
7c:4e:1d:13:22:f3:0f:55:82:30:f4:90:4c:9e:ca:
32:be:f5:1f:6a:9b:cd:54:1a:e4:1b:26:dc:0d:48:
58:f2:dc:1d:34:0a:f5:0f:b1:8c:3c:e8:a6:b6:2a:
0e:d2:c8:5f:d7:0d:3c:c5:68:a6:30:03:01:b2:d9:
59:8a:09:eb:c7:2f:6f:60:3b:8a:27:c3:14:93:3d:
88:da:3e:59:57:5c:3e:f8:6a:0e:10:21:01:8a:b5:
34:93:16:0d:58:21:4c:e1:d7:38:41:9a:c8:4c:e4:
a8:a6:ef:c6:f2:e7:86:ff:dd:7f:01:91:9c:ab:5f:
a8:9c:8a:2b:7c:84:c8:f0:db:c3:c6:e8:93:99:90:
0a:f1:09:0a:24:69:51:f1:41:23:30:76:6b:69:67:
a1:d1:c4:dc:d2:74:a1:0a:7a:e4:fa:5f:f3:86:16:
48:49:47:56:17:24:fa:c1:e9:fd:6d:f1:e7:d4:59:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:06:B8:2A:DE:36:E6:7F:57:AF:72:5A:A4:AD:89:5B:4E:E6:49
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:21:ec:57:57:d7:bf:01:d0:de:d8:d7:8f:bc:cf:d0:70:
88:fc:79:e1:db:2d:d0:d1:04:69:98:ec:a1:f6:f8:6a:c6:f8:
50:5a:4c:78:e1:0e:d6:8b:0c:b6:40:6f:81:42:1d:f0:3d:6d:
59:f6:dc:de:20:80:37:27:dd:c4:35:7a:e5:6c:e5:a5:66:28:
e4:a8:a8:aa:fe:52:7f:89:71:28:e2:6c:5b:47:11:57:ff:d6:
f2:ad:b0:a4:f3:43:32:7b:cc:24:32:65:96:0a:2b:a3:28:00:
f5:17:d8:5f:2c:b7:ee:74:03:84:50:18:b1:e3:df:d4:b9:c7:
72:e1:fd:28:37:44:50:f0:a0:77:dd:cf:b5:8a:a1:61:f6:9c:
17:1b:f3:be:5b:9f:06:df:23:15:56:83:d8:f6:72:43:a3:35:
4e:94:b7:5a:c2:dc:fa:b1:89:98:1d:21:4a:57:b4:7c:4c:6a:
7c:25:92:a4:29:87:0e:81:46:63:58:27:9f:00:95:1f:74:e2:
ff:e2:35:6e:59:3d:9f:2e:57:eb:48:8c:1e:c2:c3:23:19:01:
79:4e:8c:56:d9:6a:a4:81:94:d7:c0:0f:d0:ea:5a:6d:df:c1:
2f:b3:af:a7:9f:f8:01:3d:b5:1b:5b:8b:48:39:18:d9:cb:8b:
f9:d6:a4:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plQOck/yJ87cUJX/aVYcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm
ZTA3MzAwHhcNMjYwNTE1MDMwMTMyWhcNMjYwNTE2MDMwMTMyWjAzMTEwLwYDVQQD
EyhkYzAyMDZiODJhZGUzNmU2N2Y1N2FmNzI1YWE0YWQ4OTViNGVlNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEb4Ha+IJLub/SpDHHGxempKw1sN
M7ay82cX72ZIGU0rlaZilR2qaEirsBKjfgFMt69FiCXueT1sZLDyRxmxHGFtRcQK
x/A1Wd58Th0TIvMPVYIw9JBMnsoyvvUfapvNVBrkGybcDUhY8twdNAr1D7GMPOim
tioO0shf1w08xWimMAMBstlZignrxy9vYDuKJ8MUkz2I2j5ZV1w++GoOECEBirU0
kxYNWCFM4dc4QZrITOSopu/G8ueG/91/AZGcq1+onIorfITI8NvDxuiTmZAK8QkK
JGlR8UEjMHZraWeh0cTc0nShCnrk+l/zhhZISUdWFyT6wen9bfHn1Fk5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwCBrgq3jbmf1evclqkrYlbTuZJMB8GA1UdIwQY
MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt
ZTNiZmE3MmQ3ZWY4LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4
LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrIh7FdX
178B0N7Y14+8z9BwiPx54dst0NEEaZjsofb4asb4UFpMeOEO1osMtkBvgUId8D1t
Wfbc3iCANyfdxDV65WzlpWYo5Kioqv5Sf4lxKOJsW0cRV//W8q2wpPNDMnvMJDJl
lgoroygA9RfYXyy37nQDhFAYsePf1LnHcuH9KDdEUPCgd93PtYqhYfacFxvzvluf
Bt8jFVaD2PZyQ6M1TpS3WsLc+rGJmB0hSle0fExqfCWSpCmHDoFGY1gnnwCVH3Ti
/+I1blk9ny5X60iMHsLDIxkBeU6MVtlqpIGU18AP0Opabd/BL7Ovp5/4AT21G1uL
SDkY2cuL+dakeQ==
-----END CERTIFICATE-----
Generated at Fri May 15 13:24:31 2026 by rpki-client