Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: fj4emmJDPLHvN/xUS5Ucgsju0rdzD8lDH5lkEJmUbDg=
Subject key identifier: 02:50:45:DC:4F:54:DA:9C:BD:92:02:2A:79:6D:86:85:65:87:07:72
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019D258396FDE34AB3EDF204B46F6800A115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0DAC
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: hz9iXWm3QncAAhIdD7WNCUE9c9cT/N4tDy2iRhZhCHQ=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:96:fd:e3:4a:b3:ed:f2:04:b4:6f:68:00:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=025045dc4f54da9cbd92022a796d868565870772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:8c:47:f8:73:e4:ef:d4:ce:86:51:2e:f5:
00:d6:25:83:35:7a:56:0c:35:b0:9e:7c:dc:29:81:
d7:14:de:22:93:66:dd:99:16:72:50:83:c6:fc:bc:
1b:e6:65:4f:69:01:e4:3d:dd:a3:53:c2:ff:7c:25:
05:d1:bc:59:66:cd:77:65:87:93:d7:12:8c:e5:d9:
03:de:7e:1c:83:1c:67:5d:47:95:d2:79:a7:e7:d1:
86:b6:fb:1f:cb:05:e2:f3:14:8f:31:40:f7:47:6f:
78:ca:a5:c3:73:a7:77:c9:e7:91:e8:5a:aa:09:8d:
e5:28:69:95:c8:c6:dd:27:fe:d5:dd:3e:6a:c6:8b:
87:e0:65:95:03:a3:1f:48:cc:a1:bf:70:97:2f:73:
9d:7e:0a:f6:7f:e7:c4:dc:8f:b8:a0:14:7a:3f:c5:
ea:94:b7:67:d6:71:b9:e0:a6:23:2d:02:4f:eb:16:
48:e6:c6:09:ab:b8:56:71:4f:cc:22:27:c2:d6:da:
85:78:03:2a:cd:b1:50:21:07:0c:de:f8:c0:02:1c:
cd:71:03:e1:db:bf:b8:17:88:84:03:4f:da:23:c8:
92:89:3a:15:95:f3:89:83:ae:8d:57:e8:c6:20:45:
99:c4:68:9f:80:5d:38:1b:6f:f3:c6:89:c2:42:19:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:45:DC:4F:54:DA:9C:BD:92:02:2A:79:6D:86:85:65:87:07:72
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:54:70:4d:12:59:a8:10:eb:c2:6b:a8:53:5f:d6:01:83:b8:
66:f4:8d:97:14:45:9e:f7:f6:e0:37:f5:a3:c9:b1:04:30:78:
ec:66:b2:33:da:f7:fa:a3:5c:46:03:73:c6:31:f7:79:7a:a4:
e7:d5:1c:2d:03:b6:65:f6:a1:c8:e4:15:2f:c0:37:73:2f:5d:
bf:6c:32:27:c7:5c:42:e6:56:2d:fd:51:3f:a2:22:84:a8:77:
d1:55:b1:38:5a:01:99:73:cf:6e:e5:1c:46:1b:fc:74:64:9e:
9d:55:3b:20:80:4b:7b:f2:79:64:ae:df:76:47:8c:45:c5:c4:
fe:40:35:5b:00:c1:c1:b1:8b:dd:2b:0e:ab:37:45:6a:f2:42:
f5:cb:73:58:66:7a:fe:f0:a5:80:6e:7b:80:f9:e1:8b:7d:51:
17:33:a0:a6:6a:4b:c4:72:6e:8e:82:4f:87:4a:23:14:9c:eb:
63:74:77:5f:4e:f8:d1:e4:6d:fc:19:a3:42:ca:86:0b:35:a4:
5d:5c:3e:27:bc:e7:0f:67:0a:31:7b:98:82:06:c0:75:fa:21:
ea:db:b8:5c:81:37:9a:bf:e2:6b:d0:6c:c0:2c:09:69:c7:57:
2c:df:87:37:a8:8e:ca:69:2a:b4:e5:13:f6:85:16:f1:af:99:
cc:18:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:31 2026 by rpki-client