Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: UZ9fgd4959nEcNMnpDDFqPfwu/wGNz1MRaCErO+fgNM=
Subject key identifier: 18:65:01:58:28:5E:BD:0E:A1:4A:D5:F1:6F:D8:79:23:DE:95:5F:CF
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019D2AA97D0DD418C4324DE2DCCBC3B25BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 15:00:43 +0000
Manifest this update: Thu 26 Mar 2026 15:00:43 +0000
Manifest next update: Fri 27 Mar 2026 15:00:43 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: mCNP5CIFuPTiTwxLJgAyfz8gjeoGQqo4fwjfqFwypHM=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:7d:0d:d4:18:c4:32:4d:e2:dc:cb:c3:b2:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Mar 26 15:00:43 2026 GMT
Not After : Mar 27 15:00:43 2026 GMT
Subject: CN=18650158285ebd0ea14ad5f16fd87923de955fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:44:b4:c6:d9:44:04:6c:0e:4d:4f:28:cd:
74:3c:8d:71:da:5c:8f:26:1d:df:86:77:ff:ac:05:
9f:dc:50:6b:ce:a3:50:78:42:ab:70:91:34:ac:ae:
18:9a:e9:b6:1e:f2:05:c6:59:8a:32:8d:67:49:0d:
08:0e:71:5e:3e:c6:04:ce:02:e3:c5:74:58:5a:19:
34:60:18:c4:de:0f:9a:8c:0d:d1:41:0d:78:af:1c:
5d:55:4c:ed:5b:cc:4c:ed:1c:df:6a:af:ad:d9:a7:
e6:84:a2:9a:12:2d:58:e8:a4:8a:75:cc:03:2f:c5:
f9:5a:72:c0:16:ed:8c:79:3b:90:8f:2a:64:af:10:
19:46:57:13:67:b2:53:c6:91:f6:80:cb:8f:4b:a7:
fc:f3:e9:49:2b:59:12:35:bc:9f:ac:a9:d0:4e:98:
0c:32:cd:7b:d2:bb:19:7a:c3:6e:ad:22:e9:35:dd:
11:07:6d:97:a0:a3:c2:d3:84:44:a1:01:30:cc:85:
59:d6:61:a4:22:fe:0d:db:d5:5c:1a:7d:86:ea:aa:
07:a0:21:a7:fe:b9:dd:29:7d:6f:aa:f9:ed:ab:e1:
67:78:ec:89:6e:62:6f:08:33:fe:11:9b:cd:96:fa:
ae:bb:ea:5b:23:df:5d:25:cd:f2:e5:33:d8:76:25:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:01:58:28:5E:BD:0E:A1:4A:D5:F1:6F:D8:79:23:DE:95:5F:CF
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:e5:f0:1b:99:ec:ab:4f:26:19:38:f8:2c:b1:85:81:e0:
42:e0:03:e7:d3:63:0c:33:9d:d5:f1:52:6c:8b:ea:c3:80:be:
74:f2:31:0e:14:06:2c:f7:be:28:54:60:f0:b5:97:ca:1f:9a:
33:1e:67:6c:e6:d7:79:c5:bb:29:93:eb:db:58:e6:dc:eb:dc:
39:5e:28:82:70:70:52:cb:73:81:e5:17:25:4b:f1:13:97:40:
d1:13:de:a2:c1:62:a8:1b:1f:a3:3c:c5:b5:bc:db:19:c3:64:
b2:12:24:1f:75:99:d6:01:d1:7d:78:9b:79:23:5a:0e:4f:c3:
11:d8:4e:66:d8:0d:c8:4a:fc:05:23:8b:3a:30:8c:a7:fa:7e:
61:97:37:98:59:c0:07:09:35:c1:93:ad:d0:a5:20:49:9e:47:
93:6a:35:25:f3:2f:76:e8:18:73:93:90:2c:32:d2:4d:c0:9d:
69:7f:77:81:0f:cc:c6:90:81:9a:9b:f4:87:97:c4:65:c0:ab:
bc:b5:04:50:34:0d:28:ac:b2:07:b1:4f:07:be:91:b5:10:00:
66:e3:15:e4:28:90:0f:1f:55:3a:c5:d3:f1:cd:9d:12:44:4e:
6e:10:b2:c0:0d:bb:a0:80:4e:a6:b6:fd:5d:c2:62:36:cf:95:
fd:93:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:42 2026 by rpki-client