Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: G0bV6XRhrMMVf22jXXarUPt1crQtN5fLwqXXO3beEzY=
Subject key identifier: AD:71:B3:ED:58:F2:E7:CA:45:40:30:F3:5B:4F:9A:DD:3C:E4:CF:71
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 019D3909ABEB6BBF3F347FBB6D1971AF671E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 1807
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: rw9AnRJEepTFcQIv6WyY9TBHHRkuGPZ0WizlpGZaHzg=)
2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:eb:6b:bf:3f:34:7f:bb:6d:19:71:af:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=ad71b3ed58f2e7ca454030f35b4f9add3ce4cf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:d6:a8:72:fd:c2:5d:12:39:6c:9c:3b:cf:
7f:b4:0d:55:a6:b5:23:28:43:5d:22:e4:1d:8f:f3:
09:6c:29:7f:ed:b3:e0:23:ec:53:ff:a7:78:8d:1c:
bd:84:85:a9:79:07:a3:01:0f:fd:8d:66:d7:53:a8:
0e:ec:c0:2c:12:a5:60:1f:7c:f4:e4:8f:88:3d:df:
ff:56:7b:df:13:be:9c:97:56:d2:d9:bf:95:02:82:
d0:96:cd:41:0e:d4:b8:c6:a7:bd:18:55:62:4c:d2:
3d:a4:bf:b1:4a:c0:e3:2f:81:f0:10:67:cb:aa:f5:
6a:c9:2f:79:0f:7f:60:02:f0:e4:06:f7:54:fc:34:
c9:e8:3c:9e:ef:64:5b:c6:5c:b0:67:e1:e0:cc:32:
aa:e6:38:31:59:58:e7:13:a0:c7:c3:6e:61:87:40:
04:3d:45:64:25:92:2b:db:39:b7:38:f8:be:30:78:
dd:f0:9d:8c:c4:01:19:5c:06:8a:e2:ae:cb:d0:fa:
3e:47:40:1f:47:3e:1f:44:42:f1:0a:d9:43:c9:9d:
b9:37:03:c3:bc:e0:67:ca:28:f5:f0:80:35:d7:69:
c4:d0:6f:6d:6e:9d:60:4d:0d:16:40:4a:d1:57:10:
a7:25:ed:a3:6d:cd:4f:be:65:d6:1b:25:77:d1:36:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:B3:ED:58:F2:E7:CA:45:40:30:F3:5B:4F:9A:DD:3C:E4:CF:71
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:2e:ce:23:37:ab:1f:a6:57:9d:4e:f6:34:97:49:72:8c:
4d:e5:91:78:d5:d8:4c:71:d2:c7:32:b1:79:12:3e:08:54:5a:
41:a3:db:1b:d9:f2:ac:fd:4a:3f:ea:3b:90:08:93:e0:d9:89:
ee:65:a3:72:0d:37:01:d3:52:bc:0e:f5:a8:92:0b:f2:3f:bb:
4c:4c:0d:b8:ef:60:84:11:48:4a:b5:89:eb:cb:41:1f:73:c9:
d6:9c:4b:5e:e5:50:a3:01:61:65:4e:4a:4a:a3:cf:36:b8:8a:
64:8c:c6:a6:29:8b:44:7c:9b:4c:15:a2:4a:83:12:07:5b:0b:
79:ec:55:46:df:eb:d0:38:24:08:6c:0c:67:c6:cf:c5:39:5c:
ae:0c:44:1e:0a:60:71:b1:67:f9:0c:f2:18:98:cd:8b:b3:d8:
94:1c:16:c8:bb:20:db:05:95:dc:80:7d:74:e0:3c:a5:82:9d:
3e:d8:57:1b:45:4f:df:f5:88:21:7e:05:3c:9d:46:34:57:c8:
a8:15:32:0b:74:75:96:39:78:2b:43:cd:00:db:e5:25:81:48:
4e:71:bc:7d:00:c4:86:19:14:8e:8f:fe:0e:f9:8e:8d:f1:90:
14:c0:8d:4e:00:a7:6b:e1:c8:bb:7c:2f:6c:c2:57:5a:aa:23:
01:3c:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:41 2026 by rpki-client