Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: BJ30S13EKcGdlqxr4IllvR2OgdbKDZp1zww1W+kMj0s=
Subject key identifier: 64:7F:AA:B4:2A:A3:85:F5:2E:7A:6A:C0:19:A1:61:D0:23:C5:19:1F
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019D9C63126399D6DD9B9E7EB27BCACA83D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 127F
Signing time: Fri 17 Apr 2026 17:00:31 +0000
Manifest this update: Fri 17 Apr 2026 17:00:31 +0000
Manifest next update: Sat 18 Apr 2026 17:00:31 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: IXmkclVB+egrHnc/LFZIK/uLTldUsRC1e+8RAQKh0Hg=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:12:63:99:d6:dd:9b:9e:7e:b2:7b:ca:ca:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Apr 17 17:00:31 2026 GMT
Not After : Apr 18 17:00:31 2026 GMT
Subject: CN=647faab42aa385f52e7a6ac019a161d023c5191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:b0:6b:0d:35:d2:2d:5c:b4:b9:ef:88:2f:
03:be:f4:0f:ae:8a:32:02:e1:f8:6b:7e:4f:2f:66:
d6:4a:c1:48:5c:80:72:d3:20:2e:c9:a4:1e:69:83:
43:75:76:70:f9:6f:51:b4:6d:59:ce:bb:0e:b1:aa:
8f:f6:1c:21:6c:a8:11:95:47:11:fb:5c:0f:ad:44:
ad:fe:d7:65:f0:e3:1c:de:39:f3:5b:e8:96:1d:46:
86:ce:a2:06:c1:ba:ab:f7:f5:22:d8:a2:52:3c:c6:
d5:24:30:8f:19:1b:b1:ec:6d:a1:66:22:b8:87:d1:
cd:55:d3:cc:c4:73:84:f8:90:2b:62:2f:9a:6a:be:
b6:43:be:d6:30:68:2a:fc:4d:de:c4:05:e9:84:46:
0b:cb:2f:85:f1:12:4e:21:ac:b1:16:26:d1:c9:8e:
c9:32:56:e9:cf:c8:50:5a:d5:7a:b1:0b:38:17:45:
bb:b1:c4:19:fa:fe:a6:ec:23:ac:78:3b:61:f5:53:
ee:66:ea:17:f1:61:72:bf:55:16:fc:6e:08:2a:c0:
95:e4:27:f4:b6:82:08:62:55:0b:ce:fd:65:7c:ce:
0f:0e:9a:fc:38:44:85:8d:9c:94:30:e3:af:4e:0c:
29:6d:56:b3:9d:ac:a6:e8:50:2c:24:be:5e:ba:d3:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:AA:B4:2A:A3:85:F5:2E:7A:6A:C0:19:A1:61:D0:23:C5:19:1F
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:04:93:4c:7c:cc:d1:5c:b4:f3:5e:ad:eb:31:2d:1c:0d:
d6:e1:b4:91:75:5a:62:68:72:0b:57:d8:29:93:71:bf:98:c1:
93:03:c6:ac:c5:3b:32:92:58:26:d0:98:9d:e6:50:1e:c3:a1:
25:32:1d:58:99:16:ca:17:ff:dd:0a:8d:f0:8f:28:26:f3:4c:
77:b0:ba:60:a8:8d:ab:a2:28:47:b4:1d:fe:0a:b3:3f:d2:d2:
97:0e:14:f3:57:69:c2:33:00:88:06:96:23:ff:a1:90:27:c9:
84:56:0e:9c:a8:26:32:34:73:1e:0c:1d:49:bf:dc:33:05:96:
af:11:29:ad:9d:62:58:a7:a3:a2:ba:b6:7d:9b:51:3f:44:59:
77:02:38:04:85:0a:2d:9f:e4:7c:5a:ce:ce:46:0f:72:b5:4d:
06:5a:fb:71:c5:06:2e:0f:77:a2:ab:9a:af:b0:1e:95:2e:73:
c8:47:02:a1:ac:58:15:ae:3f:1b:0a:05:86:d1:fb:a0:5c:cf:
cd:25:4c:a3:3f:6a:07:0b:9b:90:69:e2:17:ab:bd:3b:e2:58:
48:78:1e:29:39:cd:bf:e9:2c:c2:6d:8e:31:f8:14:b0:59:90:
0c:df:27:f0:fd:c3:8e:b0:b5:ec:1d:e8:ec:38:8a:d8:64:1d:
9d:b8:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:54 2026 by rpki-client