Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: 1Jk0b05GK1oRMwhoCI3sVCnXnFtxVp+vUS/odZ6pV8I=
Subject key identifier: B4:86:35:E3:80:93:9F:61:B6:ED:3D:E5:07:B2:96:9D:C2:5E:82:2B
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019D9A3EA44970711A609B1D135456440647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 12A8
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: icCIWUDJuuVk2f3VnknUPgYD74F93OF3xfLfoXHUY1Y=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a4:49:70:71:1a:60:9b:1d:13:54:56:44:06:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=b48635e380939f61b6ed3de507b2969dc25e822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:25:a4:50:7a:24:76:a6:6a:22:72:f1:86:
2d:74:03:f1:2b:06:d7:6e:a3:03:fb:65:a3:dc:ac:
83:29:d8:6a:35:ff:16:46:e7:75:3e:ef:d8:65:94:
bb:aa:74:ab:0d:4e:c0:60:12:65:77:da:46:6b:ae:
9f:74:70:01:65:07:42:51:7f:88:e8:3b:bc:bd:54:
e0:ce:a8:49:21:1e:a4:67:d1:0f:23:d4:01:14:2e:
38:5a:ad:12:b6:aa:1c:49:66:18:0c:87:6a:be:4b:
45:f7:ce:41:5a:26:62:63:7a:7c:cc:f7:c4:8a:fe:
20:ca:c1:f8:af:42:0b:26:82:ff:14:fd:af:9c:55:
82:e7:a9:13:44:ef:e2:50:45:a8:32:2d:cc:7f:9d:
9d:ba:cd:5a:77:72:08:dd:a1:09:d2:6a:13:af:49:
29:16:90:1c:8f:dd:7f:34:f8:f1:b4:a1:07:65:bc:
9e:d5:3b:cc:24:9f:8d:ec:ff:88:a7:e7:02:a7:a7:
92:df:b0:cf:b8:b0:62:ea:3b:82:9d:56:19:3e:16:
90:b2:d0:e0:c0:40:66:36:3b:d8:e5:ce:5d:79:a3:
0d:88:d7:b7:8e:2e:7b:54:a5:62:ef:7d:ff:30:65:
2a:51:bd:8d:6c:70:ce:9d:55:2d:c1:e9:67:d5:ef:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:35:E3:80:93:9F:61:B6:ED:3D:E5:07:B2:96:9D:C2:5E:82:2B
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:12:f1:d2:b6:ce:58:8a:ee:6b:49:1b:3d:87:bf:52:2f:18:
7e:bf:a1:3f:a1:96:7f:38:28:bb:85:8a:93:0e:ff:0e:b5:91:
2d:7c:6d:0c:ca:a4:ea:d7:60:7d:a3:66:82:fe:01:56:51:dc:
fe:47:0c:ca:b5:4c:41:d8:16:9a:04:9b:c7:72:cc:95:80:28:
bc:25:21:2b:02:b6:95:55:4b:a1:9b:01:fe:39:54:17:a4:47:
d3:4d:8d:5e:7d:8d:d3:fb:a8:ce:a2:bc:62:a8:32:8a:02:2f:
2b:97:1d:7c:31:12:58:a8:12:5d:e7:bf:0c:f0:9c:c5:c4:e9:
ef:ca:0b:6d:15:b8:f5:c1:43:b3:9b:08:5e:37:34:23:df:56:
a0:6c:86:bb:72:93:41:16:49:db:db:b6:19:c2:09:25:4a:89:
30:45:52:69:78:f9:50:9c:ee:dc:9b:94:08:94:e5:73:68:11:
9e:10:da:a4:3f:4e:f8:07:bd:ee:ff:0f:92:45:1a:ec:4a:ba:
32:b0:e9:9c:d3:98:2d:26:c1:13:31:4c:4b:c5:aa:d9:df:5c:
79:21:dd:b8:4f:a7:56:6e:78:6a:6a:36:13:3d:98:80:ec:ba:
f6:0b:6f:45:b1:12:50:c8:e5:88:35:73:b2:a9:43:4b:d4:6a:
47:c3:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:05 2026 by rpki-client