Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: HGh5wjXud8ZOu9q0j0xtXa1MkriBAvd1Le5+HrzGQkY=
Subject key identifier: D0:97:9A:E6:1A:12:58:C9:EC:77:42:F6:21:1F:76:14:00:88:5D:EA
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019D3865630DAFEB70993BE610AD14C41B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 10B6
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: FP4Vho58IGiQTk1hSoNatxBflMtuTRnUaeN7ADaE8dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:63:0d:af:eb:70:99:3b:e6:10:ad:14:c4:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=d0979ae61a1258c9ec7742f6211f761400885dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:ff:d3:f4:a2:e5:fc:fc:39:60:4c:0a:4a:
b1:bb:27:6e:ac:f4:0a:10:9b:a1:4b:8a:35:16:54:
33:8a:ca:a5:cb:b1:82:c3:15:48:5f:35:80:f4:60:
f0:31:36:31:d6:08:06:e9:19:27:a0:c3:86:12:05:
2b:04:53:1f:e3:33:1f:81:50:70:49:be:55:bc:67:
c9:cb:84:71:42:d3:47:90:b9:28:d3:2b:19:c3:fb:
f0:62:e1:8c:6b:c6:ac:dc:c9:7f:9d:80:81:ae:a3:
99:7d:b4:cb:01:b2:79:43:4a:b0:46:22:3f:2d:dc:
eb:1f:11:ed:1e:b5:a3:b6:2b:35:a0:8c:84:e1:b6:
9b:0e:51:2d:be:3c:da:11:4a:99:e7:15:62:a9:73:
98:22:e5:25:ce:50:8b:9d:b2:cb:ed:65:cd:44:31:
d6:22:ee:c5:62:7b:e7:c8:b2:c3:3d:fa:cb:e3:19:
3b:ef:75:6b:0a:9e:73:24:82:ee:fc:bb:79:2a:05:
57:bd:7a:2f:b5:fd:a1:fa:ce:cc:d0:e6:e1:3a:3a:
38:b1:9e:82:81:2e:4d:e6:56:63:15:28:f7:e0:fa:
45:aa:5b:88:81:4f:f4:18:91:39:77:ac:b6:47:c3:
0f:52:0c:db:7c:27:c4:73:38:14:f2:e8:10:8d:19:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:9A:E6:1A:12:58:C9:EC:77:42:F6:21:1F:76:14:00:88:5D:EA
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:45:92:3e:a6:d2:65:ff:a3:15:b5:16:34:b0:fe:77:92:
29:80:bd:7b:e4:99:6a:46:8e:e2:40:72:85:aa:28:16:04:b7:
50:0c:b9:c6:dc:65:0e:cd:20:c4:1a:63:29:60:e0:9a:a7:68:
54:cc:ae:13:8e:aa:69:ee:16:7f:01:36:b9:15:d7:f3:4d:ff:
d2:aa:b6:80:9e:f4:c3:f1:2e:ee:95:62:62:52:99:a6:21:17:
dc:9f:9e:40:8d:af:01:8b:70:74:12:09:b0:69:8f:ea:54:00:
a9:d4:dc:a3:9d:23:39:d0:99:8b:3e:6c:d7:06:f1:16:aa:55:
de:8c:2b:bf:25:88:c1:75:8e:8d:fc:eb:85:d7:26:6c:d8:1b:
58:d3:ba:46:76:c4:a4:6e:2d:3e:10:3e:36:86:eb:84:f9:13:
5c:ca:8a:1f:37:6c:97:7a:61:a4:bc:eb:3f:0e:01:3d:da:69:
36:1c:aa:97:05:d9:7b:be:37:d5:1c:49:b8:c2:d1:e8:9f:a6:
14:02:87:37:c9:24:e2:2f:0f:76:fe:22:84:27:45:ca:34:61:
75:80:d3:2d:87:ca:a8:87:04:10:fa:57:97:52:fa:2a:41:2d:
87:aa:9e:35:50:83:f9:fb:ab:71:fa:8e:8d:17:2c:1f:34:df:
bf:b2:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:58 2026 by rpki-client