Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: +XKJxx9XevxGvTDIsjPlR2CkwlBhBI8P00gBxEj4Hwg=
Subject key identifier: 3E:BC:5D:D4:5A:B9:C8:AD:5E:63:1F:D5:0A:E7:EC:45:B4:F8:19:7E
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01A0D53921DF7E9FC66FCA10F9B8C8501BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 21:01:26 +0000
Manifest this update: Thu 24 Sep 2026 21:01:26 +0000
Manifest next update: Fri 25 Sep 2026 21:01:26 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: x3MKXl/qt8pERNO/MznUXsRGUfJb59r9OGvUKJZTNSo=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:21:df:7e:9f:c6:6f:ca:10:f9:b8:c8:50:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Sep 24 21:01:26 2026 GMT
Not After : Sep 25 21:01:26 2026 GMT
Subject: CN=3ebc5dd45ab9c8ad5e631fd50ae7ec45b4f8197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:4d:a1:f0:28:e8:71:29:0f:4f:d4:66:18:
66:87:7a:ad:69:70:8f:b7:70:2f:fd:dc:74:9b:09:
1e:1c:d6:54:a9:df:16:cd:9c:de:c4:93:56:c8:17:
55:99:84:b7:94:6c:f0:49:ca:8f:fb:71:02:b6:8b:
7e:f0:c1:3f:b0:41:47:64:c9:17:83:d7:48:88:f6:
4d:30:d3:08:fc:0c:4a:0d:ab:c1:04:9c:4b:e0:03:
08:e9:92:4c:1a:00:8f:62:b5:b7:d9:67:0a:09:57:
dc:8e:b6:61:43:9f:1b:19:eb:c8:1e:b7:b1:d5:90:
da:d4:57:8f:66:c2:61:43:49:77:c6:8b:42:ac:93:
e8:2b:49:bd:ae:be:b2:9a:be:ab:6c:f3:66:13:ca:
c1:10:04:91:c0:f3:bd:59:9d:17:96:10:99:d7:f9:
15:34:e5:58:ea:3e:da:58:17:0d:93:64:68:68:e1:
0c:fd:e8:fe:09:63:e9:99:0c:15:62:b3:0c:66:a4:
84:b5:d2:40:5c:b5:3c:60:f0:5b:38:88:24:7d:c6:
ac:6d:ff:3d:78:d1:ed:6a:6a:0f:77:2d:f2:70:94:
5d:97:51:19:44:a9:77:2d:47:11:24:49:59:f2:06:
af:da:0e:5c:6a:34:25:68:51:0d:a0:1f:4f:14:ef:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:5D:D4:5A:B9:C8:AD:5E:63:1F:D5:0A:E7:EC:45:B4:F8:19:7E
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d2:69:3f:70:30:95:f4:2a:fd:bb:cf:54:b7:5d:80:fd:71:
fe:f3:dd:45:a8:18:d2:64:ab:6c:60:5e:08:bc:8c:41:7b:6b:
78:fd:27:c0:cb:c4:c1:35:db:4b:66:7c:01:32:0e:58:6a:eb:
57:6c:16:1e:65:fc:2e:cd:95:39:5f:d1:36:b7:b5:d5:1d:f9:
92:4a:8e:85:03:04:87:2f:73:75:fa:64:53:ea:93:38:67:9a:
11:17:ee:2a:69:5b:a8:72:c3:a2:b0:3a:e7:db:50:cd:09:ab:
e7:86:2e:4c:82:88:eb:f2:8b:1a:13:5b:85:75:69:54:85:05:
d0:d4:45:91:47:b0:d4:77:3b:6a:60:85:56:66:0c:05:ff:89:
a3:d6:df:4d:95:24:e7:2c:dd:a9:6c:c3:91:53:76:76:e6:e3:
a8:48:34:c4:f5:0a:c9:3d:76:dc:e7:d0:dc:4c:c7:7d:3a:d9:
9b:0f:b8:cd:c6:33:62:f5:a6:2b:6c:be:68:79:34:5e:9c:d4:
48:53:5d:5f:d6:a1:c4:11:49:3f:6f:05:8d:a7:93:a4:95:a8:
68:53:d6:cd:26:88:25:47:48:ee:c1:24:4f:9d:73:95:c8:bf:
62:b0:70:43:ac:41:5c:da:53:0f:5d:1d:c5:37:a7:78:70:89:
d1:1d:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:01:00 2026 by rpki-client