Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: PfUjLHO7Uqzv6XfsKuBWcMXwvCwUsPaPg+i7RWoPlzg=
Subject key identifier: B1:6F:4E:2C:1B:F2:0F:D6:F3:5B:EC:FF:14:EA:8D:22:12:7A:45:0B
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 019D9AAC4DBF0C161E2830591ED72D28AEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 121F
Signing time: Fri 17 Apr 2026 09:01:16 +0000
Manifest this update: Fri 17 Apr 2026 09:01:16 +0000
Manifest next update: Sat 18 Apr 2026 09:01:16 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: +dEPPpE/BVpStpahP/+7ujKFaKdLWK6CGYgJv4w+ijQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:4d:bf:0c:16:1e:28:30:59:1e:d7:2d:28:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Apr 17 09:01:16 2026 GMT
Not After : Apr 18 09:01:16 2026 GMT
Subject: CN=b16f4e2c1bf20fd6f35becff14ea8d22127a450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:c6:27:55:a4:07:bb:e3:2d:d8:61:16:94:
4e:65:3f:9a:c1:ea:f6:c5:96:25:78:d5:41:eb:21:
20:d9:76:70:e2:0c:94:31:14:77:42:9b:f0:26:32:
60:e7:fe:34:f2:95:12:dd:0a:85:93:5b:f7:0e:b6:
9c:2a:9d:e7:3b:dd:05:53:b1:ab:b3:8b:77:22:22:
8d:02:c8:ca:cf:34:07:e9:8a:ae:51:fd:5c:46:77:
ed:12:09:3d:c1:93:9d:c0:c2:b1:93:8a:23:4d:ef:
b2:28:9b:9c:15:5c:f8:5e:b6:fc:3b:4a:03:62:92:
d3:72:81:cd:d8:36:23:7b:95:f3:19:c2:29:b4:7a:
4b:28:d2:83:12:34:17:fc:63:ac:e9:e2:1b:42:88:
12:35:a6:b0:76:b5:a2:26:bb:54:51:2c:0e:ec:7d:
db:ef:95:e2:24:60:91:50:2e:b1:f1:09:7e:73:54:
a8:ef:2f:35:f2:33:ff:f7:d4:9c:61:b7:c4:bb:fa:
8d:eb:de:65:eb:7a:c6:b0:59:70:92:29:13:7e:2e:
88:72:80:a5:05:60:23:47:4c:9d:d0:86:13:3f:b1:
8d:8e:f4:cd:86:f8:60:53:39:d8:33:94:50:43:f7:
a0:63:bc:bc:dd:6c:e5:de:86:b1:63:ec:e5:ad:a7:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6F:4E:2C:1B:F2:0F:D6:F3:5B:EC:FF:14:EA:8D:22:12:7A:45:0B
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4d:70:53:d0:8c:e1:f6:ef:9d:9c:59:6f:5a:b2:80:fd:1b:
4b:23:5e:85:2e:7b:75:2f:40:be:65:64:d3:9e:07:d9:69:33:
c2:9f:9f:48:2e:ae:af:bc:6e:df:5d:35:c4:94:63:ad:2e:e8:
99:ec:c8:4a:af:52:b6:93:93:55:1d:5d:21:11:c6:4c:a7:ac:
11:b1:fe:0f:75:77:e7:79:e4:27:29:5e:87:f4:02:e2:0d:94:
91:22:3c:44:5d:96:f7:b4:12:78:fb:cd:57:1c:5a:9f:32:66:
cd:26:8d:b3:f2:41:e2:01:72:a5:3a:50:79:18:9b:d3:c2:a8:
97:63:1e:6a:d7:d2:01:18:5e:eb:49:48:a8:21:db:b8:92:bf:
28:60:18:3b:91:b0:43:f0:9a:70:71:f6:4b:4a:f9:b6:8e:c5:
e0:e4:62:6a:9e:a1:54:1c:6d:55:57:7e:04:fa:59:34:88:8b:
c9:1a:4f:96:73:2d:d1:54:c3:6b:a3:b9:7b:d1:27:9e:06:a8:
46:ac:32:2e:6b:a6:9d:0c:29:e4:50:ed:8b:ae:d7:d9:34:3f:
54:27:0c:df:41:9c:bc:4e:c5:2a:59:65:a7:24:93:6b:09:89:
e7:d8:4e:e7:1f:4a:c1:59:a3:73:13:1b:88:11:4a:d7:1f:67:
83:45:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:14 2026 by rpki-client