Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: 0y41T7v7TFBlCx/qvQiN1CAz9eJboJVsRLnDd7nLWnM=
Subject key identifier: BB:4B:89:56:BF:6D:8B:90:B7:B5:33:0C:E2:A8:4B:FD:0D:70:93:CB
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019CAAC6C8D1712E684FE27236F83D6BE69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0A6F
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: AMb1du6LYPW2tLV0LYyY/CS1HHQz8veJqdv5/jce7To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c8:d1:71:2e:68:4f:e2:72:36:f8:3d:6b:e6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=bb4b8956bf6d8b90b7b5330ce2a84bfd0d7093cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:6f:60:e2:2c:f5:92:16:bb:02:ef:22:26:
e8:b2:9f:8b:49:45:c8:fb:43:b9:22:1c:c1:ad:7e:
a9:f2:c0:20:af:4a:25:d0:0d:e7:d2:2d:5a:64:21:
52:d8:f3:aa:04:c2:b3:8c:e4:8b:9b:c1:a2:fa:ab:
e4:76:6d:e9:ce:f8:97:03:af:db:3d:b2:ca:26:16:
e7:36:e8:57:4a:93:b9:b8:ea:b6:9e:03:02:60:10:
ab:f4:f5:c7:18:25:f0:d5:a9:b9:8c:ae:16:be:2b:
40:cb:48:9a:c3:ad:b1:bc:00:a6:d8:6f:2f:ad:28:
f5:e4:44:1e:fa:ae:2e:ee:50:8d:4c:fc:49:7b:c5:
c8:17:5b:e8:87:2c:45:b1:53:af:6b:2d:b7:1a:a9:
82:31:c8:0f:17:09:ff:7d:d8:08:77:cf:b2:25:49:
aa:71:a4:3b:0b:4f:be:d8:88:32:a2:3a:aa:4a:75:
49:73:19:d6:77:7a:cd:ac:42:57:07:46:4c:44:80:
38:46:7c:a2:c4:f2:65:f8:19:38:4b:50:08:e5:c9:
b1:b1:90:3e:83:d8:e9:08:e3:93:f3:06:57:a8:49:
d2:9d:64:34:6d:9b:94:6d:3e:bf:85:28:4b:f8:3c:
95:e1:31:36:05:f1:29:80:16:24:43:a3:96:c9:ab:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:89:56:BF:6D:8B:90:B7:B5:33:0C:E2:A8:4B:FD:0D:70:93:CB
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8b:1e:fb:12:82:eb:33:66:ba:0a:1f:d1:1a:fe:09:fb:a2:
03:1f:36:1e:38:8b:3a:08:a9:40:b9:c4:eb:98:31:eb:8c:af:
0c:f6:aa:d2:3d:97:1d:93:7e:37:26:d1:75:76:2d:3c:73:94:
fb:63:d7:d6:3d:da:71:c8:5a:b0:a0:73:cf:3c:c5:4c:cd:05:
ea:af:44:22:38:aa:7b:e9:90:c9:f8:f5:fa:32:c8:83:df:a7:
bb:a4:7b:8f:00:c4:11:81:b4:4d:26:b5:81:ae:63:5a:00:be:
15:f2:16:ec:d8:9e:01:a0:d4:d2:0c:8c:62:3e:bc:65:f6:60:
6b:6c:44:b0:f7:fe:07:ce:09:ef:77:08:61:63:43:36:c9:df:
8f:ab:c3:b7:1e:4e:bf:29:dc:7a:06:e2:1d:38:80:8c:1c:e2:
cb:19:3b:56:cf:fa:63:ac:e0:5b:c1:c2:fa:a8:03:b2:d5:de:
f2:0c:4d:b8:06:c8:50:9f:c8:ab:38:34:af:bd:1b:b6:96:81:
97:c9:28:5f:bc:04:03:62:06:02:af:9c:a3:54:0c:8e:5e:46:
68:a6:c8:94:89:31:40:2b:c3:b3:e5:06:5f:ca:54:1a:80:5d:
de:3b:24:d1:b1:43:a0:9f:75:1a:f2:42:87:77:1f:c4:51:b4:
ae:e2:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:06 2026 by rpki-client