Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json)
Hash identifier: /9HiiNzxqahtY9Kt1m5Llm5LGe12sDaAqrzc737OkBc=
Subject key identifier: C6:44:D3:96:60:10:AF:12:0E:0B:41:F7:CB:66:8E:E0:17:87:9D:20
Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0
Certificate serial: 019D9818F02C1977D0A85222F3791949D215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
Manifest number: 05D8
Signing time: Thu 16 Apr 2026 21:01:04 +0000
Manifest this update: Thu 16 Apr 2026 21:01:04 +0000
Manifest next update: Fri 17 Apr 2026 21:01:04 +0000
Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: SOw8LRAocQMRGKraPxdXBsxTxd+9CvQP1vfVlUsrKHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f0:2c:19:77:d0:a8:52:22:f3:79:19:49:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0
Validity
Not Before: Apr 16 21:01:04 2026 GMT
Not After : Apr 17 21:01:04 2026 GMT
Subject: CN=c644d3966010af120e0b41f7cb668ee017879d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:c2:c6:b6:10:2a:18:1f:a6:42:35:44:87:
3f:65:74:89:1e:be:58:a3:32:22:a5:9d:7c:58:e1:
d7:db:c2:5a:03:78:3b:30:b0:17:89:e9:97:4b:71:
0a:f9:7a:b0:96:e2:b9:4a:9c:58:f5:ec:60:25:50:
bc:9e:14:fd:67:83:84:19:4b:45:bc:e4:62:f4:e1:
2d:88:bc:f8:8a:04:10:97:19:d1:cb:12:31:3a:8c:
e1:a4:11:24:e1:13:06:31:5e:eb:9e:2b:57:b0:c4:
d4:6a:d5:06:8e:33:6c:f5:d5:c7:45:54:4b:f0:81:
dc:6e:e5:f7:6c:1c:07:36:08:4b:32:b8:62:33:89:
87:f0:1a:b2:7b:d5:fa:f7:41:29:e2:31:1c:42:89:
d4:14:c3:4d:9d:e6:8a:2d:97:58:3d:9e:9a:93:6d:
a1:e1:82:0e:fb:68:f1:64:ed:5a:02:dc:aa:b5:48:
05:df:f3:1c:8a:f5:2d:35:7e:64:b7:3f:24:cb:b8:
a1:b0:f8:8b:2b:18:5c:b9:88:93:14:90:09:ea:ab:
b4:46:ea:61:da:be:90:35:bc:67:77:b2:f8:e7:4e:
8d:a6:e2:61:36:3b:09:23:71:76:6d:6a:33:a9:80:
5e:b8:89:6f:f7:79:a9:47:cc:24:f1:48:71:2c:f2:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:D3:96:60:10:AF:12:0E:0B:41:F7:CB:66:8E:E0:17:87:9D:20
X509v3 Authority Key Identifier:
keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:c1:e1:1e:91:a3:37:f7:96:37:09:d9:19:0d:ad:ad:dd:
31:4e:2b:e5:b6:7e:c3:4b:48:1d:4d:52:22:70:0b:42:36:47:
9b:0b:7f:7a:b2:74:4b:af:79:07:3f:e4:e6:64:06:b4:01:9c:
5b:73:92:b3:98:48:11:31:6a:68:fc:6a:f5:de:c8:3c:a7:a7:
94:77:bd:1f:90:20:f2:4a:fd:45:52:ae:1e:64:7b:6f:8e:cf:
40:d8:60:79:c7:e4:89:60:e3:2f:98:71:f8:e6:1d:a7:f6:f2:
e6:7c:dd:8f:71:9a:13:1c:9c:95:03:f2:e7:7e:cb:df:09:3a:
11:0f:3c:90:82:08:7d:d3:e4:8b:ce:44:ab:b2:9a:fe:51:c8:
3a:8e:82:e8:ee:ff:18:61:bd:e5:dd:dc:ff:a3:bd:6e:51:3b:
aa:f9:74:1b:07:fc:b7:2d:87:6f:ff:9b:f7:5f:8b:dd:60:69:
54:c4:3b:2f:69:4c:11:52:01:ec:76:53:55:61:db:34:7f:2a:
80:6d:db:06:50:81:7d:d4:e7:65:d5:31:e0:86:d6:03:b9:e1:
62:c5:82:ec:18:4e:b4:2c:de:c2:ec:f8:dd:10:90:49:dc:dc:
16:d1:74:7c:60:a6:f9:92:1d:fd:92:d6:51:4a:34:5e:d5:1c:
d7:67:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:10 2026 by rpki-client