Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: rYvUeZ/VlmOb6LhSByQuF18niu589hRniWuaA4KZUqY=
Subject key identifier: 00:CE:3C:44:6D:27:9B:07:D1:38:84:72:94:6A:58:F2:59:1A:F7:21
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019DA4540F09D7F8E15EA4B465749B2DC957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 1550
Signing time: Sun 19 Apr 2026 06:01:05 +0000
Manifest this update: Sun 19 Apr 2026 06:01:05 +0000
Manifest next update: Mon 20 Apr 2026 06:01:05 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: ZfEuK0RTSrL3g+LoyqhYaYQtSAbHE8qDdE7tC3VA5ww=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0f:09:d7:f8:e1:5e:a4:b4:65:74:9b:2d:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Apr 19 06:01:05 2026 GMT
Not After : Apr 20 06:01:05 2026 GMT
Subject: CN=00ce3c446d279b07d1388472946a58f2591af721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:33:69:be:9e:b3:08:f0:be:9c:23:e2:8a:
83:73:75:3c:9d:3c:c3:e4:1f:66:7a:a7:44:aa:d5:
bd:cb:8d:a7:41:a6:fe:12:dc:be:9e:40:c7:72:37:
7a:20:a5:be:7e:54:f8:72:59:51:45:3f:a8:31:f0:
7b:ab:9b:05:8d:db:fb:e5:d4:38:ce:b1:cb:04:ce:
3d:a1:98:65:91:09:72:43:ad:b9:99:bf:14:18:cb:
27:06:a9:8c:93:33:63:04:b9:b2:68:af:fb:73:f5:
cb:b5:e4:05:41:98:df:b9:53:fd:ff:f7:d1:b5:ed:
96:cf:57:75:23:fd:6d:5e:de:fe:78:38:dd:f9:b7:
92:63:54:a9:34:ca:d3:62:ae:6a:0b:48:23:48:40:
06:a0:25:20:77:ba:dd:f0:9b:64:6b:26:92:ac:99:
26:78:5a:aa:9e:f3:41:26:c8:31:96:ba:f1:ed:d4:
eb:0b:e0:51:0c:97:f4:a4:d3:11:e6:73:d2:94:3d:
2b:cf:ce:15:b8:0e:b8:c0:50:65:d4:18:f1:fb:26:
00:72:97:de:89:f6:d9:11:f1:b9:61:6e:a9:79:ed:
5c:f7:c6:91:ef:d1:1c:ac:4a:5b:e9:00:cb:f4:f8:
ab:4f:3d:dd:4a:45:cd:5a:d2:65:76:e3:d6:b3:46:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:3C:44:6D:27:9B:07:D1:38:84:72:94:6A:58:F2:59:1A:F7:21
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d6:03:3f:cb:02:71:9e:3c:a3:ef:c5:3e:dd:34:f0:27:f1:
e5:b1:01:b9:8b:8d:b3:94:0e:c7:25:0c:66:27:53:42:34:bf:
49:94:1b:68:15:45:08:38:20:74:42:32:91:34:88:5a:5b:bf:
bc:29:fd:23:06:ce:61:13:5b:43:85:df:ef:be:c3:8a:95:65:
46:f9:e5:08:83:43:8e:d6:cc:1a:72:4b:c7:0c:72:a8:6c:25:
b2:db:3b:99:a9:0b:33:5f:c0:9d:b0:1b:6d:85:62:85:59:99:
b7:c2:bf:a2:98:eb:02:93:28:a1:bd:8f:4e:b6:0f:14:8d:ca:
d5:86:3f:4c:84:47:ed:b6:97:48:36:a5:3e:1d:1a:be:24:86:
64:89:7c:e2:b3:68:d6:ab:b1:05:a9:11:0b:38:89:96:01:24:
b4:8c:99:9c:32:58:4b:89:50:d9:92:b7:52:df:e2:bd:d8:51:
51:53:3d:b7:1d:ae:ae:a9:5b:81:5a:8e:ef:59:f9:33:7b:22:
93:d9:35:ab:ca:58:5f:6a:3a:2b:99:5f:dc:bb:d3:73:3d:0f:
ad:d1:10:9a:57:18:79:df:e0:1c:9b:f9:35:b8:12:05:24:2a:
43:10:01:57:9a:8e:c3:8d:6f:4c:94:86:f0:b8:aa:6d:e4:a6:
5e:23:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:13 2026 by rpki-client