Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: yncEqtzYyElaOcNtwuY2a0KLUDxk1lreRnX2Ub7b2IQ=
Subject key identifier: 0E:9F:66:40:78:16:C1:D6:FA:E4:94:B5:DF:21:11:1A:D9:13:D5:BC
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 019D2816915F55DA58E5FE27CC26EAB77DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 059E
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: nPL202UL++w3YqfvvOPuXsMwnHATnlfQH+as8O9B8nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:91:5f:55:da:58:e5:fe:27:cc:26:ea:b7:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=0e9f66407816c1d6fae494b5df21111ad913d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:e6:f4:96:b1:6e:82:62:70:49:bc:2d:b3:
c6:01:2e:d8:31:58:2a:0f:c8:fd:eb:08:29:b4:38:
7c:96:2b:82:91:76:f8:c9:77:76:12:37:ce:a8:8d:
15:e4:ce:c1:b0:eb:c8:04:81:79:f9:e9:68:46:8c:
5e:28:d9:10:0f:44:13:e9:4d:e0:65:7b:32:f7:f1:
54:9c:60:7f:0c:e0:26:5f:dc:3d:b4:7a:83:22:5b:
12:8b:c7:0b:ac:83:6d:36:9e:f9:4c:13:07:e2:64:
f5:c8:12:fa:03:1a:e3:16:dd:96:5f:39:59:cd:5c:
62:a3:b0:8a:5f:dc:76:59:67:c4:1d:95:23:77:55:
69:84:39:89:c0:c3:17:57:9d:69:cd:54:bf:b2:fe:
9c:21:c2:de:a5:c5:ec:01:0f:fb:cc:6a:24:c6:54:
21:77:f5:f8:59:94:e9:a6:41:9c:3e:a5:02:06:fe:
5f:4f:52:fc:06:f0:d4:03:a3:46:d4:c3:fd:33:ea:
41:29:cb:7b:bf:27:a3:b2:18:be:45:07:78:d1:a2:
df:6f:03:71:73:7b:cc:75:90:bb:a4:f4:18:55:9d:
ba:3b:27:fa:bb:12:9d:57:8f:1d:3d:3c:c4:93:c0:
fa:3b:77:fe:af:b7:47:09:61:28:2b:d2:6c:8d:3d:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:66:40:78:16:C1:D6:FA:E4:94:B5:DF:21:11:1A:D9:13:D5:BC
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:b2:f3:17:53:0c:7e:b5:14:43:3d:a8:b6:32:4c:90:38:
0c:4d:ee:e6:f7:4e:64:bf:e8:07:bf:b6:ee:52:28:80:3c:18:
d5:c8:2e:06:9e:7d:80:5b:78:bc:61:1e:08:44:a7:d0:42:43:
55:7f:ec:99:c8:84:30:81:ff:16:ab:2f:c4:50:bc:1e:09:e4:
8c:81:80:12:82:67:40:84:db:62:2e:7e:40:07:98:62:02:ac:
f2:ee:79:fe:c5:bb:72:6f:3c:61:ff:81:f7:c4:43:98:f6:64:
91:46:53:70:42:50:62:d6:25:74:f5:91:27:e3:2d:5c:2a:e3:
f4:0a:72:58:cb:b8:01:ff:5e:94:5c:b6:77:b3:22:65:17:51:
68:3f:af:09:e3:66:69:dc:34:9a:08:37:55:b5:0f:e2:ea:13:
9c:a9:2d:64:23:4f:f0:f9:e5:94:dc:a0:fd:58:8f:f3:fa:12:
8d:2c:da:09:5c:6a:22:36:ce:71:a8:c7:92:04:86:d0:67:05:
5c:61:fb:28:12:ca:1c:98:a9:41:36:6f:50:70:46:98:3c:93:
40:34:54:a1:a4:d4:e4:a1:bc:f6:9f:f5:31:5a:7b:86:6e:56:
0b:3e:d0:6a:55:11:0c:53:9a:4a:3c:5e:84:9e:1b:cf:08:6d:
e2:6f:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:26 2026 by rpki-client