Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: /eo9H5AJgg3nDXDaaxb5zYb0nffRyBGAtVyfgUl6CKs=
Subject key identifier: 63:9B:D4:C1:89:0A:E9:4E:9C:35:70:37:74:60:B8:7A:E4:E7:C1:75
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019D9AE2ED3919B137B1659741203CBCB0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 14A6
Signing time: Fri 17 Apr 2026 10:00:56 +0000
Manifest this update: Fri 17 Apr 2026 10:00:56 +0000
Manifest next update: Sat 18 Apr 2026 10:00:56 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: +dOmvGOsGSzDMJbEpBV+8RFIKx9YdU0L4yYs8HGLio4=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ed:39:19:b1:37:b1:65:97:41:20:3c:bc:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Apr 17 10:00:56 2026 GMT
Not After : Apr 18 10:00:56 2026 GMT
Subject: CN=639bd4c1890ae94e9c3570377460b87ae4e7c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:b6:bd:da:29:f4:ec:06:06:5b:7d:7b:e2:
ac:a0:8f:66:ee:fa:e1:76:8d:df:ec:29:c8:72:80:
90:d9:93:b1:a2:f0:cb:75:b9:44:c1:cb:2a:75:c4:
95:ed:32:ab:6e:55:97:63:11:74:da:a2:23:f5:1c:
89:dd:76:7d:37:c7:8a:80:c5:d7:d9:79:81:99:48:
ea:6a:a1:f9:5e:78:ca:f8:a1:aa:72:2f:dc:76:76:
12:40:64:34:9b:c7:b3:89:b7:62:e8:bc:b4:40:28:
f6:a2:d3:44:ad:41:15:61:ef:ba:8f:1a:d5:9f:5e:
0a:c7:7e:4d:94:ae:f6:c0:1b:aa:77:df:6f:09:77:
00:58:e7:a7:b4:1b:3d:f0:e7:03:9a:22:6e:1a:74:
f0:66:17:6c:81:d3:48:08:44:fb:26:c9:93:ef:8d:
31:4a:2f:11:52:30:ae:6d:86:2f:a5:8c:a6:14:3d:
00:56:96:a6:20:e6:d6:b4:94:38:b7:8a:85:97:04:
cd:eb:58:a5:c5:cc:69:2b:01:20:16:04:4b:ed:53:
09:94:a9:d8:57:7b:35:2c:48:17:10:7d:a3:a3:01:
81:3d:c0:03:59:c4:e2:0c:db:52:45:b1:50:6d:9d:
fe:5f:51:9a:61:1f:13:41:24:3a:7f:5f:3d:73:26:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:D4:C1:89:0A:E9:4E:9C:35:70:37:74:60:B8:7A:E4:E7:C1:75
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:62:62:84:0e:40:df:b2:0a:2c:ff:6b:a3:21:e1:35:64:
4c:1c:8e:5b:93:44:70:d3:e4:79:b3:ae:77:70:5d:f8:a6:73:
3a:d7:eb:f1:b8:28:ec:aa:7b:7d:ad:4f:5e:f0:32:cb:bd:e1:
75:23:84:1a:73:77:6b:9d:6a:14:fb:29:3c:b1:28:ad:1a:85:
58:ad:0d:7f:36:a4:ff:85:46:e4:68:d5:0a:9c:47:b5:67:d6:
90:a5:f4:59:81:d7:24:0a:fd:37:2b:22:3f:b0:61:e7:c4:f3:
6e:27:f7:a6:ab:6c:a4:d5:01:e1:72:9b:13:68:ab:5c:d5:bc:
b5:15:ea:1c:fa:ad:4c:85:71:e7:88:1c:fd:43:37:c1:64:4f:
17:d1:a0:58:40:e4:2d:7b:d4:e0:5a:04:c9:88:8b:d9:40:b3:
17:43:5f:05:78:c0:e7:12:a8:7b:29:80:7f:39:83:4b:61:f2:
95:a1:6e:7c:d4:c5:26:bb:e4:b9:84:93:c2:1c:e6:08:84:89:
22:e6:f8:6a:1b:ef:c1:47:0a:70:9f:e6:eb:4e:be:79:70:a1:
40:63:85:8c:13:83:b8:63:a1:51:04:a4:e8:67:92:93:cd:3e:
10:b0:7b:88:7c:ae:e5:f9:7a:71:db:fe:ee:a7:83:85:6c:8a:
9f:7f:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:41 2026 by rpki-client