Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: tqtPKrxJwZwJZHOms2pA1aGI1ZlnCcjlq0HhmAKsM8Q=
Subject key identifier: 34:A4:E3:7B:7B:DC:09:A2:91:61:49:C0:62:A3:A3:39:E0:9C:B4:65
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 019D9B873606A998D49594D15C5D6C50FE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1567
Signing time: Fri 17 Apr 2026 13:00:22 +0000
Manifest this update: Fri 17 Apr 2026 13:00:22 +0000
Manifest next update: Sat 18 Apr 2026 13:00:22 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: Kil8G3a5TZOfLm8bFe1I78sagep96oMC6BIe8C8jLrQ=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:36:06:a9:98:d4:95:94:d1:5c:5d:6c:50:fe:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Apr 17 13:00:22 2026 GMT
Not After : Apr 18 13:00:22 2026 GMT
Subject: CN=34a4e37b7bdc09a2916149c062a3a339e09cb465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:a0:b4:b4:cb:2a:e0:e0:01:da:0a:07:70:
b9:a2:0e:ac:86:e8:d7:25:de:2c:59:99:9b:93:78:
02:fc:0f:0f:26:fc:cc:14:86:65:10:88:5e:dc:4b:
93:ff:f8:ff:21:18:fa:4d:1d:46:b5:23:f5:26:ff:
68:9d:98:e3:3c:7b:e9:85:70:9d:40:b0:29:f0:0b:
6c:7d:6e:63:79:9d:0e:6a:e7:ea:5b:58:95:81:2b:
89:b3:92:55:df:49:a6:bb:bf:65:c7:b7:75:e9:a3:
42:2c:2f:fd:d9:7b:0e:81:9c:ad:91:63:c3:9c:05:
5a:f2:ef:c5:42:b4:cf:90:2d:e5:c0:c0:04:a9:2f:
4b:0b:52:c0:55:7f:83:1d:17:69:85:d6:5e:39:3f:
e9:44:ca:3b:82:27:8d:ee:4a:7d:cc:7f:a8:98:17:
aa:41:41:62:e9:73:28:4f:29:08:ac:c6:d4:38:a0:
31:f1:a8:c4:43:e3:ac:8b:8f:f9:0d:15:b7:f0:26:
13:e8:e4:d1:5f:e2:6a:4e:e2:dd:d1:01:f2:69:40:
47:9f:0f:82:52:06:26:88:5f:26:59:9d:8a:9e:87:
af:f6:f2:64:1a:d9:47:7f:dd:94:36:7f:b7:39:21:
53:78:66:b3:39:86:04:19:c2:d9:f6:b8:a5:e1:b3:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:E3:7B:7B:DC:09:A2:91:61:49:C0:62:A3:A3:39:E0:9C:B4:65
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:51:39:90:bb:82:65:7c:2a:7f:e1:85:ba:30:6c:10:b6:3b:
32:d5:de:99:22:b6:ca:14:57:c8:a8:b7:66:d5:70:e0:07:29:
36:06:21:89:6d:2c:e9:1b:35:98:91:96:4b:d3:09:2c:1f:74:
03:72:83:b6:b1:b8:6b:b6:01:13:c3:20:9e:92:03:46:4c:06:
d2:34:b4:30:25:8b:01:8b:2f:e0:27:40:c8:ad:6f:a4:3b:d6:
82:2c:d2:89:36:fc:92:c1:2d:6b:93:1d:d6:c7:74:62:4c:74:
e7:93:d2:34:fe:bd:13:c1:96:2d:f7:b6:d9:7e:f5:b7:44:a7:
6b:49:a0:96:73:b8:9b:55:2c:ed:fb:d5:d9:2c:f2:32:a0:5c:
5b:4c:c8:0a:26:ca:9f:6f:05:93:bd:ae:13:02:e1:77:76:c1:
9a:ce:d3:1a:5a:03:b8:0b:34:fa:49:64:c5:ad:15:38:40:da:
76:3a:99:11:02:a3:30:ec:76:d4:de:f0:92:36:10:c5:a9:74:
3d:b9:99:27:c6:6d:26:7a:cb:18:f9:0c:cf:e4:b1:8a:3b:28:
9e:2a:6e:99:ca:52:60:b0:04:c2:45:e2:2f:36:b0:4d:31:f9:
af:64:44:22:59:be:22:ca:ab:c2:aa:1a:87:22:06:72:fd:20:
76:f6:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:23 2026 by rpki-client