Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: ccXNHASE2cwfCebyNOfBZ2NGF4VylopabHMe2fFKShk=
Subject key identifier: 9C:91:D7:15:80:3D:BA:F1:02:46:5C:60:AC:09:56:5E:C5:3D:7D:FB
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019D98507049A9D95F7A7F2C5E65C06E9D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0F4F
Signing time: Thu 16 Apr 2026 22:01:41 +0000
Manifest this update: Thu 16 Apr 2026 22:01:41 +0000
Manifest next update: Fri 17 Apr 2026 22:01:41 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: KBEKaHlaVQcZnzf24q6Ty16Zx42LYKcA9Ak9RCt2sZY=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:70:49:a9:d9:5f:7a:7f:2c:5e:65:c0:6e:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Apr 16 22:01:41 2026 GMT
Not After : Apr 17 22:01:41 2026 GMT
Subject: CN=9c91d715803dbaf102465c60ac09565ec53d7dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:8c:ba:cd:fc:3d:53:86:4f:63:89:37:f3:
0c:96:53:c6:3b:9b:b1:f1:51:8d:a8:19:70:5c:41:
40:f5:18:e5:e6:61:39:7f:d3:90:91:57:a0:9b:7f:
0f:c8:c1:65:a6:5e:51:29:8c:f8:b9:2c:23:38:cd:
54:fa:19:98:c2:94:23:73:03:94:36:77:17:ff:b1:
f4:90:a0:d0:01:f5:28:6b:6b:8d:fb:8d:27:b4:04:
64:63:9c:8a:a4:a1:af:4b:29:96:d6:95:ba:36:e9:
1f:d0:2d:83:e4:c3:91:c1:41:58:a1:6a:ec:b0:5c:
d1:f9:32:40:38:52:64:38:98:98:23:e2:7d:0f:d7:
71:b3:7a:2f:22:77:5b:7c:9b:d7:2d:fb:0b:4a:cb:
63:f2:7a:df:b2:6e:78:97:17:b6:22:d8:8f:ec:c6:
03:98:02:b9:9c:89:7f:64:13:5a:13:a0:b9:5b:a6:
45:61:03:fc:46:4f:b0:ce:88:bc:8c:1c:63:05:94:
a1:cd:86:82:f0:47:64:11:31:76:c5:71:cd:51:c6:
e0:35:30:1e:d4:12:90:60:01:85:2d:89:2e:f3:3a:
3a:f6:4d:04:4c:17:f9:eb:6b:e8:4c:58:05:cf:97:
8c:a1:46:55:53:b8:0f:c1:ea:cd:9e:ae:d2:88:72:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:D7:15:80:3D:BA:F1:02:46:5C:60:AC:09:56:5E:C5:3D:7D:FB
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:50:49:46:ba:95:e3:d9:f8:76:10:01:1b:ed:1a:cb:ef:34:
1f:a0:1c:f4:86:fc:4a:78:c9:ec:4b:2c:01:d1:0d:11:8e:bd:
83:0f:f1:71:17:5b:dd:2a:9c:87:71:09:de:47:92:51:6e:f8:
c8:64:70:c6:01:8c:74:f0:d7:88:2e:7f:45:51:04:2c:4d:0d:
45:26:74:e5:89:3c:4f:98:3a:a3:d0:7a:88:89:e1:2c:da:18:
aa:4d:14:b5:c2:4b:cc:f2:4e:e2:f1:74:63:e2:14:3f:3f:66:
04:ff:a6:7e:1a:91:19:7c:8f:b8:4b:79:dc:42:8b:b2:13:fb:
e6:53:cb:64:8b:8f:4d:10:ef:f9:0a:fe:f1:5a:33:62:60:31:
0d:59:b2:45:3a:a8:c3:bc:05:7a:cd:a5:de:1d:ee:76:78:b1:
02:62:1a:8c:dd:3f:b7:f2:92:99:03:47:af:50:48:ad:f2:3f:
48:47:1c:99:d4:49:d6:04:ec:aa:88:5c:e1:aa:f5:22:c4:4a:
11:e8:f1:e8:91:7b:d3:88:bf:ac:37:d4:38:a4:6d:c4:54:84:
e8:30:c5:aa:9a:25:9d:38:f0:54:1d:42:65:7c:ac:6f:60:bc:
13:88:b1:e0:27:c8:6a:7f:3c:52:d0:b9:24:4b:0c:0b:29:79:
10:a8:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:54 2026 by rpki-client