Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: OoAYEhy8SKooOkMSnoefxW9/FdEbq6u1ZBd3Rs/LRLY=
Subject key identifier: FA:8C:3C:C2:14:E6:B9:DD:AC:6F:7A:3A:70:E4:5F:8D:9A:56:87:69
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019D273AE1EF7A84160298334124A5BF79CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0FBD
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 52NjTqJ6fjzC+d7xQ3TNde87DjTdPX6Gqv697eNK/ZA=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e1:ef:7a:84:16:02:98:33:41:24:a5:bf:79:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=fa8c3cc214e6b9ddac6f7a3a70e45f8d9a568769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:e3:af:b5:14:2a:03:b4:16:d9:d6:45:5b:
ea:7b:c3:25:8b:77:81:18:d3:21:da:34:d1:41:bd:
b0:1b:36:e0:bd:f3:94:89:aa:01:22:95:4b:0d:75:
6c:dc:40:05:bc:d8:a0:e4:7e:1a:21:d9:76:f4:9f:
36:2e:d3:b8:dc:ca:68:3c:2f:75:c4:3c:fd:cc:be:
67:44:47:98:62:e6:36:72:b9:4c:01:0a:00:5c:99:
a7:97:fe:4f:c5:2a:94:34:1e:17:23:46:fa:a2:a4:
de:d4:4b:3b:50:bf:7c:31:bf:de:47:da:26:84:69:
74:a2:55:f2:2b:ed:51:dc:3d:02:0f:cc:ed:c9:09:
32:19:6d:6d:52:f9:3d:f7:2e:a8:5a:97:65:29:e4:
9f:35:0d:af:39:99:b9:3f:b0:fc:42:f4:8d:ae:bf:
94:3c:66:84:05:80:96:eb:b8:4c:72:65:dd:61:24:
6b:4e:c3:14:3b:db:43:16:d6:bc:e2:8a:fc:71:79:
6a:51:30:ed:8a:21:b5:18:71:85:7e:79:6d:aa:75:
d5:f9:18:6e:9b:f1:17:11:3a:50:51:70:3d:f7:f1:
8b:d7:c3:3b:80:90:76:04:4e:ee:ae:7b:c8:cd:ef:
bf:5f:41:dd:29:4f:88:57:55:46:a6:61:c5:fa:13:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:3C:C2:14:E6:B9:DD:AC:6F:7A:3A:70:E4:5F:8D:9A:56:87:69
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:db:54:2c:5f:f7:b4:27:bf:62:ae:e3:a4:4a:ae:01:c1:1e:
88:b7:29:12:eb:e4:1c:ee:f0:44:36:33:8a:a4:ed:9a:5b:c8:
6b:a0:f8:bd:5c:18:f0:13:d4:6a:e4:79:2e:3b:51:59:fc:2d:
ff:1d:7f:4a:06:d5:89:53:87:a1:1c:94:76:5e:5e:f1:33:01:
e8:e5:7f:13:51:3b:63:ed:a1:c4:17:ca:3e:55:1f:f0:75:af:
48:84:59:69:c9:2c:6d:66:ec:6e:b7:81:5a:9b:1e:68:a3:ad:
db:c4:62:17:4c:c5:7d:3e:3c:7e:f8:15:ac:2b:69:dc:aa:82:
5b:6e:e3:af:75:96:67:15:c4:f1:cb:00:10:3e:ce:21:df:d8:
20:69:6c:15:b6:50:3d:49:ce:90:47:b4:bc:6f:1c:07:9b:8c:
e7:af:f8:ee:b3:93:56:9b:41:bf:18:9a:21:c0:cd:29:bd:34:
d4:6f:61:73:b7:44:32:c5:62:60:ed:03:8c:47:4f:27:3c:1c:
01:7c:6c:92:b4:ff:6c:cb:ab:2e:a9:e8:98:f8:c1:bc:9c:e0:
2d:3a:31:a8:01:07:ee:54:d3:06:dd:88:c1:1d:e0:2e:69:86:
c1:51:af:69:82:3b:bd:1f:35:8a:01:87:ef:c9:50:c4:e1:78:
51:6b:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:33 2026 by rpki-client