Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: gns4A6jOlHMU/SjGogvc9AJs+QBCRXu/HibtGNWSEhs=
Subject key identifier: 7D:7A:E3:58:5C:14:D8:5B:4F:8D:77:EF:E7:FA:33:64:74:AA:D8:72
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019D337588EE83772262280AFD589B7BD3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0F6C
Signing time: Sat 28 Mar 2026 08:00:33 +0000
Manifest this update: Sat 28 Mar 2026 08:00:33 +0000
Manifest next update: Sun 29 Mar 2026 08:00:33 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: 56xEtnSsZCLC9WzIH8v2FyeQj7ZjT2CJwcGFv4rEVVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:88:ee:83:77:22:62:28:0a:fd:58:9b:7b:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Mar 28 08:00:33 2026 GMT
Not After : Mar 29 08:00:33 2026 GMT
Subject: CN=7d7ae3585c14d85b4f8d77efe7fa336474aad872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:00:7e:c4:ce:49:42:ed:3c:63:49:6c:8a:
9d:bd:89:4c:09:38:9f:83:67:57:34:d4:78:35:ba:
ab:f8:12:8c:97:82:a6:1b:8f:73:d3:79:e0:d1:07:
5e:e6:6c:e3:c5:c2:d6:69:0c:07:77:13:06:11:67:
33:51:11:e9:40:e6:f6:61:89:30:58:5e:14:37:f0:
6e:b5:48:15:5a:1f:73:f7:91:e0:19:cb:40:c0:b3:
21:6c:e2:66:a6:d7:a4:b4:c1:fe:6b:d1:c3:83:78:
ca:79:28:b3:d3:6d:04:b2:cd:78:34:e0:8c:47:24:
b5:e1:d2:d3:d1:ec:ad:05:3d:a0:ec:34:5d:73:b6:
65:59:c6:d7:d3:a0:21:0e:19:97:b2:12:3e:ae:82:
fb:1e:a3:89:ba:cb:91:f0:bd:64:1f:b4:be:9a:8d:
45:10:20:fc:13:b0:2a:f7:a3:af:cb:e0:68:b7:c5:
71:5f:a1:28:ed:cc:f0:1d:9e:a2:28:33:89:67:66:
a4:33:af:96:9e:95:30:ad:ec:26:2f:53:1d:b3:5a:
f6:c9:59:99:a1:7f:07:e3:24:7b:f6:bb:67:7f:18:
9c:08:7d:50:b5:a5:55:cb:14:b8:91:e6:ec:38:98:
f7:9b:e8:03:91:28:e7:22:47:ef:43:1c:c2:f6:a8:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:E3:58:5C:14:D8:5B:4F:8D:77:EF:E7:FA:33:64:74:AA:D8:72
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:6f:2a:9c:bf:53:9d:84:af:83:0c:7a:22:ef:f7:29:77:
5d:42:6a:1f:06:86:53:45:0c:3d:df:2f:31:af:21:6e:51:84:
fd:54:ae:fc:94:d7:93:ea:54:98:cd:d1:2e:c5:8c:7d:8e:3f:
e3:b7:d5:3c:d4:cc:33:2f:6e:68:98:cf:38:6d:1b:8e:9c:27:
14:64:18:b6:25:bb:c2:12:10:65:9f:45:77:ab:ca:5b:dd:c3:
18:4a:a1:b9:d3:c4:cb:9c:9f:84:33:79:39:c6:86:8b:9d:b5:
b3:8f:80:7a:18:89:f2:67:d5:05:68:a6:7e:14:19:4b:44:ad:
96:73:62:e2:7a:f7:39:a5:4b:d1:a0:ba:2e:d9:56:52:cc:f2:
8f:f4:09:3f:e8:45:df:aa:5e:a4:18:d0:25:fe:8b:2f:0e:ea:
4b:d7:b5:cf:1d:b3:5d:cd:98:16:28:49:bc:32:f0:b0:f5:0a:
ae:ac:5d:0a:12:94:77:ee:b6:27:ca:01:74:2b:3c:3a:53:0f:
69:4d:fd:b2:44:c0:b6:76:db:eb:63:28:6d:f2:db:99:ee:62:
44:8d:5a:b0:54:84:c5:32:fa:ba:63:f1:3b:43:8d:0e:f1:d0:
d9:6d:87:00:e8:2d:66:0a:a7:d2:d6:84:09:2c:45:01:8b:1c:
55:98:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:03 2026 by rpki-client