Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: dPIhl0bT2ipMv/fuPzCsiIE4PC8b8bXgsHZYQlJcVqg=
Subject key identifier: B4:DA:CC:1A:7F:AF:41:CA:85:0D:4F:E5:34:44:A6:8F:A5:8D:74:ED
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 019D269643412B32E8EDCD0F1BE3AB5357BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 01B0
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: dSSxiQiH+3MsNgCSW7OBHUHQqTthDCSvd62AN90jnB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:43:41:2b:32:e8:ed:cd:0f:1b:e3:ab:53:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=b4dacc1a7faf41ca850d4fe53444a68fa58d74ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:60:c4:c4:6e:f1:1c:d5:5d:cd:ea:b6:a5:
ed:a7:50:a6:a9:ee:3a:c7:4a:9d:4a:db:d5:a6:04:
c7:86:b0:b9:ac:fd:86:09:7f:ed:c4:e1:a4:ff:6d:
c3:4b:b3:86:e3:96:0a:74:0c:90:53:06:c5:4d:af:
d9:74:6c:2b:59:1d:aa:a7:4f:17:06:67:e1:b9:82:
bc:4d:f5:00:da:59:8b:19:ed:9d:17:5f:e1:f6:65:
90:af:20:ed:b3:d2:42:10:fa:dc:95:5f:08:70:c0:
24:33:16:98:95:4d:9d:a1:61:3d:e1:41:35:30:10:
0c:5e:62:bc:3b:cf:c0:7d:7f:be:f2:03:80:fa:82:
9f:d9:91:85:ee:ef:05:57:f6:08:7d:45:50:ed:46:
60:9a:52:0a:42:63:ce:e4:d2:c3:8e:06:92:fc:81:
9c:67:43:20:7c:c4:b8:54:e2:fd:ab:4a:ce:c5:de:
83:37:b5:49:2f:3d:1d:73:c7:e3:ac:95:6d:57:88:
13:68:ca:2d:0a:ed:c9:01:b7:fc:20:e5:35:e3:76:
fb:7d:7b:d3:89:73:ee:09:a2:1d:2b:e3:b9:1b:73:
35:31:5f:4a:cb:6c:e6:b3:50:b8:7a:02:a9:1c:7a:
4f:5a:92:90:0c:f6:40:45:ab:cf:4b:03:d7:93:0e:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:CC:1A:7F:AF:41:CA:85:0D:4F:E5:34:44:A6:8F:A5:8D:74:ED
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f8:7d:e8:12:a8:21:f3:74:b8:a3:b5:cf:50:98:2c:14:18:
2e:94:69:44:1c:07:f4:ad:ff:9e:b9:a0:ca:df:4e:d8:1a:51:
3a:b0:1a:3b:73:d7:c3:93:0d:6f:83:fd:d6:aa:8e:8d:29:d7:
65:ad:fa:63:27:ca:f8:e3:46:66:cb:8a:10:09:39:f1:51:b6:
31:75:fa:c4:f3:36:23:0d:64:a5:a0:1d:05:c2:0e:9b:ca:b1:
93:64:ce:91:4a:ec:d7:9b:81:38:65:9a:39:79:49:82:2d:d6:
64:3f:77:41:66:03:21:6f:a3:a4:03:3c:b6:66:92:85:14:f2:
a3:7c:68:6d:ef:72:cc:4e:dc:72:56:8c:e7:5e:0a:2f:ab:1b:
b2:1d:b4:a1:79:ce:bd:89:8a:92:51:44:93:6a:46:df:b3:a9:
15:72:3f:fc:05:17:48:d9:00:19:8d:c0:ef:63:2f:44:b3:66:
9a:da:f3:a4:16:98:1b:88:51:9a:dd:c5:50:47:07:e7:4f:bb:
1e:ff:59:4b:40:c1:6a:c0:13:b5:7c:f1:53:81:6c:0c:e3:6a:
49:38:51:9b:14:f5:af:62:8b:8a:b8:86:9d:d6:3f:9f:ec:1e:
47:03:7a:6c:dc:4e:6d:21:79:66:f5:31:b1:4f:f7:fc:d7:dd:
4f:4c:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:29 2026 by rpki-client