Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: pqv8S1Jq2RkjkfR1MqST+Qvzcoa33L85WBULUpjym8M=
Subject key identifier: 22:92:21:DD:D3:CC:05:03:33:72:64:E8:2A:4E:43:6E:F3:A2:AF:2E
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019D389BF2B3F41EAE19830DD158ED05ABD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0FC6
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: AmikyVGTyMLoWtdr6szAfTRNfCmREKqKXsY/Z+6yY5Y=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f2:b3:f4:1e:ae:19:83:0d:d1:58:ed:05:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=229221ddd3cc0503337264e82a4e436ef3a2af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:e0:7a:b3:23:25:18:b9:55:0c:9f:20:0e:
ee:72:fb:cb:e2:6c:be:f2:ff:96:9e:8a:d0:09:17:
82:76:0e:62:13:26:d4:19:ed:ef:7a:b4:1c:50:00:
a7:84:ca:19:b3:c3:3c:94:3a:65:aa:35:79:06:9e:
0a:b8:18:3a:4d:da:26:76:c0:ce:82:43:f8:55:e2:
c6:2e:c6:f2:df:70:51:a4:3d:6c:67:76:31:9d:73:
03:94:d4:23:62:62:a5:a4:cf:fd:82:02:1b:26:5e:
90:9b:e5:fd:02:1e:98:61:a4:56:76:32:69:72:7d:
ff:3b:a4:3c:ef:2b:c2:2a:ac:38:09:ea:22:44:3a:
a1:9d:51:60:cd:50:3e:7f:a8:be:2b:04:d8:14:43:
1e:ae:8c:ca:97:6c:2e:34:04:87:be:4d:ed:05:54:
08:ea:2b:92:bc:7f:79:00:c6:f3:71:08:68:e1:0f:
ab:6a:5f:ff:11:a3:b6:ea:54:dd:b5:13:d8:fe:ed:
4b:06:e7:a0:c0:8a:98:41:6a:ba:ec:87:34:f4:29:
f2:bf:96:47:b6:7f:3a:25:cf:6c:dc:11:e9:51:e1:
d7:65:3d:e4:94:fb:9f:22:94:d0:0c:d5:ff:e4:0c:
b2:33:53:bc:a7:79:bb:fd:74:8c:d4:06:b3:c6:3d:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:21:DD:D3:CC:05:03:33:72:64:E8:2A:4E:43:6E:F3:A2:AF:2E
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4c:c1:0d:17:af:94:f0:ab:e7:d7:08:4a:83:e9:d2:1f:8e:
31:db:0b:c6:2c:0e:f2:31:1d:74:25:b6:82:c6:98:a3:80:3b:
cc:9c:b1:3f:6d:23:9f:c2:2c:1e:13:9e:73:74:d1:08:dc:24:
64:0d:66:39:c1:4f:13:88:70:93:1c:c9:b0:e8:84:e2:f2:29:
d5:19:7d:21:17:c1:cd:8d:ce:48:78:ae:04:15:e6:4b:64:85:
86:9a:94:42:f0:14:18:44:b6:fa:cb:0f:b9:fe:e6:23:d6:a9:
62:e0:6f:81:fb:e0:8e:46:3a:ff:f6:db:35:25:92:ab:2b:b9:
82:e0:bf:4a:5e:5c:0d:fc:1c:cf:a1:29:e5:5e:27:d8:f0:da:
f7:f6:fc:76:ef:4e:c3:cd:d4:20:2f:3e:08:d5:1e:82:02:08:
8b:86:c0:7f:f8:9f:91:8c:be:48:fb:26:bb:98:88:cd:5c:0c:
c2:5d:8c:dd:b0:e9:3d:88:26:8c:37:bd:76:d0:60:69:30:c7:
13:c3:a8:ba:6b:9f:96:b1:8a:ee:0b:f7:21:d7:6d:40:dc:27:
72:3e:18:7f:4b:5a:f5:ca:2c:c1:1c:d5:57:ad:33:61:f6:6e:
e9:63:eb:13:db:6c:04:ec:63:cd:a6:9f:5f:2c:7d:4a:79:80:
e2:ff:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:28 2026 by rpki-client