Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: RdIxUAGNaTEOme6qCaduqh28u9Ctz6p6xFxMpO1cPEs=
Subject key identifier: 50:F2:22:98:71:68:C2:6A:69:F0:6E:87:61:CD:BB:03:30:31:0D:E8
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019D98BD352BEECCD50146D46D9C5E055A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0B33
Signing time: Fri 17 Apr 2026 00:00:29 +0000
Manifest this update: Fri 17 Apr 2026 00:00:29 +0000
Manifest next update: Sat 18 Apr 2026 00:00:29 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: Zi94creU/2agVT5HadmEZFP2MhWZg7myKwzuaa3+Qhs=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:35:2b:ee:cc:d5:01:46:d4:6d:9c:5e:05:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Apr 17 00:00:29 2026 GMT
Not After : Apr 18 00:00:29 2026 GMT
Subject: CN=50f222987168c26a69f06e8761cdbb0330310de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:5a:e8:fe:02:c8:58:68:88:ed:c6:ab:46:
a9:14:73:d6:27:17:29:fc:3d:3a:26:c1:72:5f:d5:
96:30:e1:4a:93:fd:91:34:d1:26:fe:34:f6:3a:f4:
82:8c:7f:48:c4:01:36:59:6f:db:fb:36:06:b6:a5:
b6:e1:80:ff:41:44:a5:6c:ac:a9:25:d1:d2:c7:cf:
6d:98:53:94:d9:58:ac:24:45:75:8e:16:b9:67:fc:
19:c8:53:47:a5:58:99:0b:28:70:d0:0a:9d:1f:03:
fa:dc:94:d3:c3:9f:23:25:b7:8e:d3:8d:3a:61:b5:
43:b3:c4:4a:ee:1f:54:fc:2a:cc:ef:66:4b:14:1c:
f7:1d:2b:49:83:5f:fc:e0:dc:7c:8a:af:ce:98:8b:
ba:08:1a:63:89:85:ff:07:8a:4a:38:9a:7e:0e:6b:
19:f7:dc:ea:c4:65:65:c0:9d:8f:12:c7:95:81:30:
d0:3b:5a:02:4e:80:95:a9:48:b7:87:49:19:47:d9:
ec:a4:03:e4:e2:14:68:2d:9d:30:5f:22:f6:6a:67:
40:08:51:d4:29:2d:e5:9a:3d:3b:4c:70:61:2c:1d:
b9:02:e9:39:64:d2:c9:05:92:cb:c8:bf:fc:60:ef:
91:58:1a:2d:02:e7:b6:96:e8:fa:88:c9:ac:e7:11:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:22:98:71:68:C2:6A:69:F0:6E:87:61:CD:BB:03:30:31:0D:E8
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2e:e3:cf:a6:5f:ae:4c:e8:e7:e9:76:dc:c7:80:8f:ea:11:
bb:99:8d:e5:86:02:7d:65:f5:e1:52:7d:e0:f2:23:80:44:16:
31:54:e9:a9:b5:7a:29:37:e4:c7:af:38:cd:0d:78:47:62:29:
24:f5:5c:07:21:a6:36:25:e8:e5:06:9e:2d:11:0a:68:2f:60:
c4:e3:f5:6b:d9:64:7a:e5:6e:21:5d:6f:d8:c4:f0:c4:c6:59:
36:5e:47:f3:a4:e8:2b:43:9a:3b:cd:aa:d5:c5:ca:e7:b9:46:
15:6e:bf:91:c4:e4:1e:72:2f:de:4d:34:0c:34:9c:17:44:b7:
0b:41:67:e5:08:75:b8:be:ce:f5:d4:dd:8a:a8:e9:ad:d2:58:
89:7a:aa:80:e3:b5:43:2e:05:26:30:91:ad:96:5c:c3:9e:2f:
e4:12:59:97:0b:43:0d:28:b6:9c:53:88:a3:75:59:72:80:9a:
7c:17:00:3d:96:b8:56:c5:9b:8a:a3:01:39:5c:8f:a9:ad:97:
6c:b8:b0:45:b7:db:ae:11:57:e1:8c:c2:c8:5f:56:72:d6:b7:
f0:26:a1:3a:08:83:14:d3:db:5f:34:88:c7:32:4b:61:e0:d9:
5d:45:9d:58:41:b6:11:83:b4:db:05:d7:15:c2:08:f5:28:24:
0a:43:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:40 2026 by rpki-client