Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: Kj2qkzHIDrlON5/qxc/ugbUzMlohI740hhmt7mLic7Y=
Subject key identifier: B2:44:50:20:D6:EC:2D:1D:1A:0B:CB:D0:4A:FA:AD:D1:9C:48:E1:DC
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01A17BBAE97543F6F2002EA8FA7A7FE6B2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0E42
Signing time: Tue 27 Oct 2026 05:00:09 +0000
Manifest this update: Tue 27 Oct 2026 05:00:09 +0000
Manifest next update: Wed 28 Oct 2026 05:00:09 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: tyO0LeFIxmjQ+Zxho9aa4XoOLY/68ukSCd6EtGbdsiM=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:e9:75:43:f6:f2:00:2e:a8:fa:7a:7f:e6:b2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Oct 27 05:00:09 2026 GMT
Not After : Oct 28 05:00:09 2026 GMT
Subject: CN=b2445020d6ec2d1d1a0bcbd04afaadd19c48e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:6b:33:8c:44:19:bc:43:99:d9:a4:cc:90:
87:58:f0:47:b8:5d:ae:d7:e3:56:9c:b0:b3:57:5f:
8e:b1:7c:7b:4b:6b:9d:67:dd:92:d4:3e:71:d3:bf:
61:ce:0a:83:fc:62:f6:aa:76:cc:9a:49:af:f9:f5:
18:ba:55:31:c3:2f:33:25:ab:dd:5f:3a:ba:d9:83:
3c:c1:0c:cf:46:9f:24:eb:86:cf:c7:39:29:9f:3e:
45:34:78:0c:df:73:df:e0:84:9a:b8:62:76:e8:ad:
4a:a8:80:f8:68:81:5d:98:b5:a5:f7:56:38:11:58:
19:b5:a7:f6:72:0a:5e:b0:b4:6f:64:57:6e:31:d2:
c9:94:98:02:19:50:54:27:c3:fb:52:1e:a7:19:57:
05:2a:10:ae:a2:85:67:7f:bf:3e:2c:ce:5a:86:fa:
94:83:4a:93:d5:dd:51:30:40:cc:70:e1:c3:d1:c0:
d0:79:6e:74:00:df:5b:4d:0f:fe:13:50:39:3a:4d:
c6:19:29:7e:e0:4e:bd:d0:35:00:06:58:9d:bc:cf:
8e:3a:1e:12:5f:4c:f4:e0:31:0e:86:9a:c6:f7:c3:
78:e8:96:ad:6d:db:e5:cd:cc:fc:37:76:c5:ca:4b:
77:02:ec:e3:30:f9:89:b1:c3:78:14:0f:13:87:3d:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:50:20:D6:EC:2D:1D:1A:0B:CB:D0:4A:FA:AD:D1:9C:48:E1:DC
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ee:b7:83:96:e5:d0:36:cd:58:aa:f2:5a:99:2f:14:19:5b:
6c:22:d0:ee:79:e7:65:80:6f:3f:a3:ab:3c:f1:20:ed:98:64:
4d:80:52:9d:89:86:be:c9:63:d1:9e:c1:53:93:17:6a:fc:ab:
03:58:b5:6f:07:f6:3e:24:cc:15:0b:7a:ba:0d:1e:13:cb:f0:
8c:68:60:ea:50:72:ae:e5:1e:ea:42:35:5f:75:6b:80:ee:d0:
a3:1e:24:24:12:8a:4a:4f:0b:2a:66:6b:23:9b:54:96:5e:91:
f9:08:7a:30:0e:99:b5:45:e1:24:48:bf:17:7d:0e:6d:c7:9f:
f1:ba:9b:3c:d5:b3:da:51:f8:be:44:9e:ad:fd:b0:e7:e7:94:
e1:ad:06:a2:81:8a:93:e4:40:b0:32:b1:30:bc:41:9d:dd:da:
ba:5e:7e:48:cc:92:91:2d:69:c7:a6:7b:41:bb:b6:5e:d4:24:
9d:70:55:0f:20:e4:0c:ba:be:40:a1:59:c3:ff:2f:55:e7:0e:
6d:de:bc:80:cd:72:a1:c7:34:0b:8c:7f:35:c7:95:9e:12:51:
96:57:0c:94:d6:29:29:d4:3c:96:cb:e3:de:65:0c:74:cc:b1:
15:4c:77:5f:20:41:df:b7:62:78:62:24:ad:46:f3:5b:c3:0c:
59:bc:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:27:20 2026 by rpki-client