Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: 0EwnKLsDReBfWCqv8XI3PmEmtG3+5/0ZRM6FktoRg9E=
Subject key identifier: 6E:46:3B:FA:01:05:AA:BA:B7:91:94:0A:17:AB:E4:D6:FD:DD:D8:94
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019D9850609ACE163B7F17E02153B1F98740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 04C2
Signing time: Thu 16 Apr 2026 22:01:37 +0000
Manifest this update: Thu 16 Apr 2026 22:01:37 +0000
Manifest next update: Fri 17 Apr 2026 22:01:37 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: J6GCjfD83H0Rr+5h65R8carJw9UuohJlyIqm12Np1p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:60:9a:ce:16:3b:7f:17:e0:21:53:b1:f9:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Apr 16 22:01:37 2026 GMT
Not After : Apr 17 22:01:37 2026 GMT
Subject: CN=6e463bfa0105aabab791940a17abe4d6fdddd894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:31:22:85:00:4e:20:e3:3e:fe:95:e8:28:
bd:58:7c:07:0c:8b:e1:ec:74:cf:2b:41:31:87:09:
9e:2c:0a:dd:3c:8e:e9:55:76:2e:e9:61:77:c7:29:
b1:0e:0c:46:79:8b:9e:72:c5:27:93:3d:25:a8:05:
4f:dd:26:2d:d3:21:de:33:9c:56:d9:ae:aa:5e:4c:
ef:46:9e:0d:9d:e1:23:56:6e:5a:77:37:ad:44:04:
20:0e:87:df:f8:ea:7e:7f:a0:f3:dc:94:09:27:f0:
3d:81:7a:bc:fb:0b:17:70:57:64:ab:46:95:cf:9a:
dc:94:32:10:dc:ed:86:31:d8:2a:b3:16:ba:80:3d:
96:ae:ca:70:28:10:d2:c5:a7:62:ad:34:4e:4f:bc:
d9:a5:b6:fd:d4:92:89:70:00:3b:44:39:1a:94:a7:
b3:b3:6c:17:ee:9f:82:29:52:7d:98:03:db:3c:11:
31:d6:97:59:ae:bf:d9:87:c6:20:2e:a1:75:de:b9:
bb:4a:e6:ac:a6:58:80:c0:54:01:dc:0c:22:4a:4a:
4d:2f:9d:09:3c:33:71:78:ac:5d:04:ca:aa:58:3c:
57:a2:a5:30:f2:6c:2b:63:9b:02:f6:bc:5a:df:32:
43:dd:0a:d2:59:8f:bf:55:44:2d:b6:dd:2e:1b:bc:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:3B:FA:01:05:AA:BA:B7:91:94:0A:17:AB:E4:D6:FD:DD:D8:94
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7b:42:48:42:7e:79:cc:61:45:5a:8c:c7:ba:ca:51:ca:2b:
d7:90:d1:3e:3d:af:e5:6b:79:c9:fc:20:27:06:67:8e:5d:52:
9d:10:9e:74:5c:9f:3e:75:3c:1c:88:3f:e4:cd:0f:8c:5f:a8:
03:60:8c:92:b0:53:4f:d1:d2:d0:36:96:75:19:29:98:9f:e6:
83:9a:c5:e4:ab:a8:9f:ab:09:8a:75:a3:df:87:7c:bb:f9:b2:
94:ba:2d:84:1b:bd:c6:65:1d:7b:67:7b:4c:b2:7a:ba:57:7c:
84:c6:0c:93:70:c9:6d:31:8e:12:6e:71:db:ce:ba:35:ef:2c:
fb:d7:2b:0a:67:0e:f9:25:91:0b:4f:07:11:9e:de:87:42:b0:
99:da:94:d9:aa:c7:bb:56:fe:93:14:60:2f:04:39:84:fc:a6:
14:56:6c:96:f6:f2:b7:d8:c3:82:c5:b1:5c:56:d3:fd:ba:e3:
a4:b8:e3:91:56:6d:95:9e:79:d9:9b:fb:7e:03:3c:30:c6:28:
b4:ed:7b:4b:5d:ca:73:d9:a7:63:e3:a5:8f:44:fa:ac:77:6b:
87:7c:37:da:b6:5f:32:db:f6:7d:91:ff:3e:3e:bc:17:5f:c4:
c3:43:16:ea:96:1d:55:3d:16:8e:1b:dd:eb:f2:fb:47:79:01:
20:55:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:56 2026 by rpki-client