Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: bCH8bskYwMI8Ur9woSVpOKcHufrRxFuRjW8gxg5HMEs=
Subject key identifier: 0A:BB:A9:08:83:25:61:F2:DB:4B:E8:05:20:11:44:09:58:DC:76:92
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019DA3E69DF4944D087D15AB91D13BE96024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:33 +0000
Manifest this update: Sun 19 Apr 2026 04:01:33 +0000
Manifest next update: Mon 20 Apr 2026 04:01:33 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: qMMT9+lKm9C8/szSYiGCDwoREmTkF5OT/y6gmZoNFgU=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:9d:f4:94:4d:08:7d:15:ab:91:d1:3b:e9:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Apr 19 04:01:33 2026 GMT
Not After : Apr 20 04:01:33 2026 GMT
Subject: CN=0abba908832561f2db4be8052011440958dc7692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:f0:bb:9c:1d:ef:1b:00:65:9f:e8:ce:52:
9a:b8:f8:1f:95:27:dd:43:6c:6b:3d:ce:72:9c:c8:
85:f8:6c:da:01:5d:a7:f0:6b:54:90:b6:b9:98:ee:
37:38:ec:4a:d7:d7:27:8a:79:1c:e1:45:11:08:e5:
fc:d8:2d:a3:9c:e5:40:3e:b3:9f:06:a6:0d:83:2e:
3e:8b:38:4c:91:e8:ad:1f:c6:e3:81:7b:43:a1:7f:
0e:2a:2e:ed:d3:20:16:28:2c:b4:92:ed:57:08:46:
50:11:3e:d4:5e:9f:47:a4:69:4b:09:5e:96:18:ba:
74:d6:34:52:db:df:9e:c8:63:e8:69:be:ef:8e:5a:
7a:b0:fa:3b:e0:42:30:08:bd:49:f0:18:9a:ff:94:
18:3f:a4:68:fa:77:e1:40:73:18:48:24:bf:05:70:
eb:08:e2:61:50:92:9f:7f:ae:6d:ae:cf:14:8c:da:
1f:3e:81:50:a3:ce:77:a4:d4:af:f0:e5:05:c7:1f:
e1:bb:c9:57:ac:12:c1:d6:75:c2:50:da:23:04:10:
60:c7:72:93:3c:85:ca:16:45:d1:aa:eb:0c:e6:2c:
9b:6c:71:53:7a:12:2d:48:5f:4d:ce:17:be:08:76:
cd:e8:63:b4:8a:e3:e1:7e:82:41:5f:7a:f5:67:7d:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:A9:08:83:25:61:F2:DB:4B:E8:05:20:11:44:09:58:DC:76:92
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:db:fa:21:c3:4a:36:9a:e6:da:cc:df:68:62:29:b8:5c:26:
17:6a:db:dd:d1:31:bc:78:18:99:dd:4a:4e:3a:6b:6e:94:ca:
e6:7e:27:3a:70:bb:14:18:19:c7:69:d0:1c:b0:90:48:f2:7a:
94:40:91:49:55:3c:09:30:23:43:c4:dd:f3:72:24:c6:26:73:
e2:4c:16:7f:52:16:c1:14:b8:a3:46:eb:46:c8:13:2e:28:9b:
cb:39:b8:16:3c:df:bb:73:c5:8d:e0:21:f0:a8:82:b8:52:d9:
6c:81:87:e3:b4:f0:82:41:b9:d5:38:7c:3c:28:01:35:11:b1:
05:5b:0d:3a:d2:e7:4b:20:5e:23:f6:76:0e:8f:b8:c9:ce:14:
33:4d:a7:54:80:30:5d:19:b4:32:fa:86:33:2d:20:0a:07:e3:
4d:20:9a:8e:59:48:23:95:f7:3d:34:53:3c:61:a8:10:cf:21:
b5:45:f4:78:9d:3a:18:31:28:85:f9:00:3c:61:13:95:f4:1f:
9e:08:5d:2b:54:14:32:32:33:e6:2a:03:33:a3:da:c9:bb:6e:
94:20:de:fa:42:eb:dc:c9:d1:3d:61:f9:3d:49:89:df:b5:83:
5c:fa:bd:f2:19:7a:83:6e:00:05:b6:73:a6:b9:9b:eb:80:60:
f2:6b:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:11 2026 by rpki-client