Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: Kd/U8Aoz+okwoxsiORY7WvpcrfERCmTsvTnqEkpFOY8=
Subject key identifier: 21:8D:A5:9B:C0:32:E2:E5:D9:99:7B:69:F6:71:B3:3E:F5:26:66:B5
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019E1CB5268507F60A1F19251A5B5D336F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0D7B
Signing time: Tue 12 May 2026 15:01:34 +0000
Manifest this update: Tue 12 May 2026 15:01:34 +0000
Manifest next update: Wed 13 May 2026 15:01:34 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: /UdaNnLdnV/qsMeGeVDQ9VBcAlMbWKjbIOG5+niz3+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:26:85:07:f6:0a:1f:19:25:1a:5b:5d:33:6f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: May 12 15:01:34 2026 GMT
Not After : May 13 15:01:34 2026 GMT
Subject: CN=218da59bc032e2e5d9997b69f671b33ef52666b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:df:5b:0a:a7:2d:96:35:5b:9b:ed:df:ff:
01:24:c9:1b:90:a3:d7:7b:47:c9:c9:c1:9d:ff:0d:
32:02:9e:77:fd:db:34:7b:ea:58:5c:94:eb:39:7d:
25:a0:6d:f0:87:be:f8:d4:ee:a1:dc:93:00:8c:1b:
6f:28:fd:16:4e:d8:45:1f:c4:6f:d5:fa:dd:2e:a2:
4a:44:dc:09:68:5a:67:55:e0:ce:d2:5e:4d:45:fd:
f1:7c:df:38:35:7b:a6:ea:a4:fd:04:fb:5b:58:8f:
fa:84:8b:d7:29:c3:e6:c8:ff:c0:a1:87:c2:1b:f0:
5f:d2:c1:07:aa:99:1c:e3:36:05:75:f2:06:38:7a:
9a:a9:15:13:19:c1:5d:9b:b2:04:e8:20:cc:19:f9:
c8:78:26:1d:38:fd:8d:db:ef:be:cc:65:1a:db:5c:
4c:b2:7b:9a:98:f7:50:93:fd:8a:63:19:e2:b2:a5:
5f:94:78:fe:18:ac:84:ac:da:7b:b4:75:1f:2e:35:
c7:b2:34:43:93:77:cf:72:97:39:4e:58:27:88:9f:
83:b5:a5:2e:d3:e0:88:01:dd:5e:40:a2:26:55:99:
ef:19:78:ee:34:a4:aa:c9:81:cd:eb:bf:03:c2:c1:
67:e4:1e:04:b6:5c:ca:14:ce:7e:58:8b:0d:4f:20:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:A5:9B:C0:32:E2:E5:D9:99:7B:69:F6:71:B3:3E:F5:26:66:B5
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:1c:7b:34:80:35:dc:23:8d:78:d1:a0:05:c6:d7:68:ca:
66:aa:71:96:b2:59:1a:a4:9c:32:c2:f2:98:93:3d:98:fa:e8:
8b:09:2e:f5:a7:ce:aa:b6:23:2a:91:5a:ad:a3:87:f6:d9:e4:
d0:d5:c4:4d:c3:25:5a:f6:3b:81:3d:e5:d3:c8:ac:b1:a7:2f:
61:5a:81:ce:30:63:a9:15:b8:4b:cc:08:64:6a:09:97:14:db:
06:e9:33:ef:86:7a:3b:2e:a0:cf:8e:05:c7:27:21:d8:e0:49:
3b:44:80:f3:2a:21:2c:04:3a:00:61:65:fe:54:e4:b0:d1:3b:
15:c7:91:24:d0:00:58:56:9d:50:5d:1f:f6:b0:a1:fb:5c:fd:
ee:a1:06:65:7b:0d:0c:62:38:97:d9:0d:88:a3:e0:ea:0b:be:
55:2b:67:3f:b6:f3:cd:94:46:1a:b9:04:57:aa:da:1d:bc:8c:
04:f9:bc:de:c1:43:8d:7d:7b:55:f5:5d:be:54:39:be:7c:ca:
0a:81:06:d4:d4:d5:f4:ec:57:17:fc:09:b3:fb:ea:f9:fa:e7:
43:e4:21:38:33:a0:1d:07:cc:73:8e:9b:35:9c:69:31:f8:14:
7b:9f:ba:2c:5d:c0:9f:cb:83:50:16:ec:af:1a:30:c9:1d:1a:
38:82:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:47 2026 by rpki-client