Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: 52FNnl7FZ9jLXtoWrPpVClnypq7L7S//qa0hOR/fVX8=
Subject key identifier: 6A:A1:CB:7A:8C:5E:D7:1F:C6:2D:8D:23:47:90:B4:08:68:A2:B1:DC
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 019D28BB1F3F23C97AB005CBA267396250A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 1645
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: gmPhbYvhcRwHZDpmIax95e8LEV/12Qjbp3TOFAGTMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1f:3f:23:c9:7a:b0:05:cb:a2:67:39:62:50:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=6aa1cb7a8c5ed71fc62d8d234790b40868a2b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:60:5d:5b:14:46:4f:62:7f:13:f2:a9:63:
cc:ae:34:d3:7f:de:51:99:d0:f0:c9:ef:21:63:cf:
c1:b8:29:f5:4a:a7:f4:7a:61:45:1b:f9:23:9e:93:
be:2d:97:1b:d6:95:c5:b3:93:ec:80:2a:c8:53:a4:
69:e1:5a:4e:74:c6:6d:12:6b:50:6d:45:d5:1a:60:
6d:e7:1e:75:fd:2c:6b:7c:13:23:b2:56:f9:cc:43:
83:ca:fe:95:52:f4:4c:e1:f4:6c:0e:30:7d:f6:92:
b5:e8:6b:18:bd:19:bc:a4:aa:80:e4:9a:92:f4:8e:
d1:31:01:b9:68:57:77:5a:f7:0f:31:3d:37:50:cc:
f8:d7:cb:65:62:86:74:8d:84:31:e9:e9:84:8c:28:
bc:e3:fe:27:94:98:b0:ee:16:d0:fb:b0:41:f9:c0:
f9:87:97:5c:5a:87:f1:fa:83:c6:be:6e:78:1a:e8:
40:43:c4:12:28:c0:29:eb:db:d0:d7:b8:0b:ec:94:
82:11:9b:08:a6:ac:27:12:86:26:95:0c:a3:23:bf:
33:02:58:e2:bc:26:c5:ca:1b:19:c2:63:3f:d2:82:
6e:82:65:22:85:c5:20:62:7e:d0:d1:f4:53:4e:3f:
32:61:eb:6a:6b:f8:49:d1:f2:f2:3e:b0:ed:41:be:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:CB:7A:8C:5E:D7:1F:C6:2D:8D:23:47:90:B4:08:68:A2:B1:DC
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:92:4e:a7:2b:04:52:95:fb:b6:fe:fe:97:6d:0a:b6:61:
17:76:b3:43:e1:8f:72:bc:e2:2b:39:c1:68:ff:30:a5:8e:5d:
01:e7:66:b1:f3:85:98:16:21:de:53:be:24:dc:3c:ee:af:60:
53:a9:90:d6:5c:e5:56:7b:af:74:23:9d:ad:9e:18:57:26:4f:
d1:59:bf:94:b1:6a:1b:c0:20:e3:80:25:68:02:09:a8:b9:7d:
24:75:88:59:7c:d1:65:1c:00:68:79:94:27:42:02:c0:08:93:
b5:88:68:e6:6a:56:b7:02:1b:51:a1:84:03:11:ad:1e:b0:16:
3a:bb:33:b8:b3:37:aa:14:1c:1f:73:84:00:94:05:b2:f1:56:
03:ff:c3:ff:58:aa:5f:0a:3b:69:2c:43:8c:73:7d:a3:27:08:
2c:4c:eb:0f:4f:7d:ab:7f:25:62:e3:0b:b8:89:6e:f6:1a:c7:
d8:f2:aa:35:f2:7e:49:d1:f9:df:3e:25:f0:de:05:dd:77:df:
1a:82:93:29:73:e8:a6:c4:5d:87:85:5d:ca:ae:88:dd:23:d4:
23:7e:b6:62:aa:79:9e:d5:98:32:2c:7d:15:bc:8c:60:74:43:
0f:2a:90:c4:16:14:49:46:28:47:69:e1:88:eb:c8:3e:82:de:
fa:e1:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:56 2026 by rpki-client