Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: hHcN4ZAUs1C52Gf1BXiERz5E8DY2NkTGVzlGnOMQ5NI=
Subject key identifier: 2A:E9:39:0F:71:7D:F2:58:29:6C:A0:D9:A4:08:70:5E:A4:DE:6C:73
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019DCD4FEA0D87563172C597832E66AFAE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0C5A
Signing time: Mon 27 Apr 2026 05:00:59 +0000
Manifest this update: Mon 27 Apr 2026 05:00:59 +0000
Manifest next update: Tue 28 Apr 2026 05:00:59 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: AYf7Z2OlO6jWgduvqMUrDCa6itm3tR/bxf6VsUlpeDY=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:ea:0d:87:56:31:72:c5:97:83:2e:66:af:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Apr 27 05:00:59 2026 GMT
Not After : Apr 28 05:00:59 2026 GMT
Subject: CN=2ae9390f717df258296ca0d9a408705ea4de6c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:c9:5b:be:85:a5:1e:9b:b2:3a:0f:eb:02:
35:3c:ed:84:69:57:84:36:bd:43:ff:d0:5d:ac:56:
47:86:42:09:95:ff:6c:00:69:a8:c0:ad:2f:e9:89:
12:fe:46:3c:b8:8e:d7:15:c0:5b:18:d0:63:31:24:
07:db:c0:2e:a8:6b:65:3a:e8:e8:51:98:6e:11:88:
67:5c:db:f6:6d:24:6c:e2:6f:ce:74:03:70:9d:3e:
06:7f:6e:41:02:4e:12:ba:c7:26:f9:27:ff:f9:5e:
87:90:7a:7a:8c:ea:99:6e:25:17:e8:70:48:52:f6:
c2:57:ae:20:98:cc:3d:bb:d4:f4:ee:ed:5c:27:a5:
6a:28:3e:a3:c8:72:e8:4e:3d:39:9c:3a:e3:37:4b:
4c:9a:ce:aa:ed:a9:29:74:58:92:49:bd:06:99:ef:
92:5d:1e:f7:de:9f:c2:ad:e1:cf:bc:f6:14:6c:bf:
89:e7:4f:93:6c:85:3b:ac:72:4f:b0:90:e1:59:fb:
38:fd:91:c2:8a:b4:32:44:7d:32:bb:fb:db:03:26:
76:b7:a8:87:02:bf:8e:e6:27:e0:11:84:5d:cc:05:
6b:2d:4f:9c:31:82:e8:1c:15:5a:a2:e0:7d:82:f8:
48:9a:19:c0:2d:b3:14:b7:30:e8:ad:4c:36:d8:aa:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:39:0F:71:7D:F2:58:29:6C:A0:D9:A4:08:70:5E:A4:DE:6C:73
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3c:0e:8a:bc:ca:1f:6e:ff:fc:12:d8:30:48:e5:97:88:ab:
aa:41:96:97:05:ef:bb:4b:86:6e:26:45:41:22:09:54:4f:5b:
c4:ec:36:3c:40:74:1b:bf:fc:4a:03:6c:61:51:22:4e:24:c8:
85:ba:be:5e:76:63:35:bf:54:99:86:d2:97:1e:71:74:10:59:
60:77:84:1f:62:99:32:4d:7f:f1:88:b3:74:59:dc:98:8d:5c:
4b:8a:c2:6e:52:4a:3f:d9:e3:55:70:a5:5e:d0:6b:d7:14:88:
25:34:b1:05:e7:23:eb:71:c8:9f:f1:f9:a2:18:6e:7d:6b:ef:
e0:6e:f3:9a:5d:45:3d:a1:1d:6e:c5:5e:cd:e6:df:09:fb:a0:
12:de:03:bf:4c:0d:a4:e9:2a:a4:90:f9:9b:e4:29:cd:b8:04:
4e:b7:39:a7:99:13:85:29:47:96:76:66:21:b3:4b:e1:76:a2:
2b:a1:be:19:e6:00:77:13:f4:4b:ac:11:99:98:ed:41:b4:a3:
34:01:52:f1:00:c0:fc:ba:e4:9e:83:90:11:ef:76:53:40:0f:
4a:49:3a:5a:5e:fe:62:04:4a:ff:a9:e7:3e:f8:66:b2:f6:09:
2d:d3:56:5b:b4:ea:15:88:f0:a2:14:4f:cd:c5:23:ea:44:bf:
e6:d0:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:12 2026 by rpki-client