Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: PzYIgngvYQfJhk7G56IsrJYR/3Nnex6GiOs+j6efIkY=
Subject key identifier: 64:40:0E:BF:65:A1:6D:E2:B3:AB:D2:82:29:5B:14:FC:86:01:B4:99
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019D273AED9C391CA363043DEAE084E85032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0C04
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: zZLgVqJYC9src/xyXzZ8AJW9ujq5U4cdemyUgZCPCcE=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ed:9c:39:1c:a3:63:04:3d:ea:e0:84:e8:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=64400ebf65a16de2b3abd282295b14fc8601b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:bc:ba:ae:6f:32:60:a8:01:2d:22:f1:64:
1b:90:7b:6f:df:17:a0:09:df:6c:87:e2:9a:be:2d:
e1:25:90:42:3f:23:93:c2:47:de:8e:1f:30:b4:2c:
79:ea:47:49:ee:e8:44:7e:cb:a7:e1:8f:65:00:7a:
d4:34:8b:c5:8c:5d:2a:6c:22:bd:fb:2b:8f:3e:b6:
04:6c:f1:8e:e7:aa:06:8b:05:24:9f:6e:bf:80:9f:
f2:c7:f8:61:ea:d4:21:57:d0:ce:3b:88:96:a3:e3:
af:97:d0:fb:f8:d1:90:b3:9a:ce:6b:db:eb:51:b2:
dc:fc:2a:25:9b:2b:df:58:19:ba:c5:c7:a0:46:d0:
6f:0a:17:e9:77:bf:30:de:7f:b2:03:93:e4:34:89:
50:14:cc:94:1d:84:f6:4f:4d:3f:d5:4d:6e:09:f0:
58:17:a1:9d:0c:3e:0a:6f:14:a0:c9:51:ae:ee:7e:
00:8f:b9:4b:55:be:e1:48:a0:45:b1:ed:8f:ee:ac:
1b:0d:89:b5:cd:86:01:59:1a:ca:4a:60:34:64:57:
ec:f9:4f:f3:1d:8c:a1:2e:8a:d9:7d:6e:8f:02:da:
9a:e7:0c:c4:5e:6b:3a:2d:82:07:a2:6d:de:0d:d1:
ef:55:8e:09:12:fb:c7:37:2f:16:f3:fb:32:4d:e8:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:0E:BF:65:A1:6D:E2:B3:AB:D2:82:29:5B:14:FC:86:01:B4:99
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:2e:ec:c3:9e:53:94:21:b7:2c:be:f2:a2:d1:44:57:5a:
65:d9:8f:43:0a:02:c5:f8:c4:fd:10:51:49:30:c3:25:74:65:
f3:8f:46:46:e0:92:50:6c:87:46:e7:ae:26:bb:8e:65:85:5e:
2e:f4:85:99:ec:e1:11:10:c1:29:4a:6b:9c:33:da:89:cc:54:
41:79:9d:c5:c3:bc:0f:6d:60:dc:ef:c9:e3:51:22:74:94:c6:
81:e1:58:cd:72:49:b5:e5:aa:74:8b:67:1b:98:48:22:24:a0:
78:ec:b6:a7:82:e0:70:4d:51:47:f2:9a:b4:01:c1:0b:ab:c9:
7c:b0:55:f9:87:ae:0d:ab:ec:e9:d6:f7:fd:c4:73:90:59:af:
e1:8b:e3:ef:83:7f:20:67:7d:96:38:3d:d0:cf:7b:83:35:a0:
36:27:7a:5f:52:d6:17:c7:ee:33:17:fb:1e:c7:9f:13:e0:07:
c1:bf:26:af:53:7b:32:c8:9e:b2:4d:bc:88:43:ae:67:40:b7:
b0:d8:85:03:75:ea:00:c3:dc:22:08:38:2d:54:c5:79:25:89:
6c:ac:eb:02:15:a0:65:9c:2b:3b:71:10:86:e9:8b:83:21:2a:
c2:44:51:2b:9e:cd:c5:7e:87:62:55:c0:14:b0:4d:ed:98:84:
8a:3b:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:22 2026 by rpki-client