Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier: 34W/oteXvak382SaXCtvra6AeYkFYYfZf89DKFhtyKQ=
Subject key identifier: BE:AF:8B:87:04:E5:18:6F:D0:15:C4:1A:A6:4B:B3:96:CB:59:3B:5D
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 019D9AAC3C4B5897A91343469F2AA51B9A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number: 0919
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: jwyuh70GalVoYnq9Cj7gSWVCQoahk3GTwHGAjUjPuTk=)
2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3c:4b:58:97:a9:13:43:46:9f:2a:a5:1b:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=beaf8b8704e5186fd015c41aa64bb396cb593b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:62:3d:58:9b:e1:16:53:2d:6f:cb:ee:c0:
83:05:28:1f:ff:eb:57:53:53:fe:46:65:90:cc:77:
f9:50:4d:e6:92:7e:5c:3d:19:c9:79:f4:1e:69:86:
6d:90:14:99:6e:2f:5f:a3:ca:60:ce:58:5f:bf:e6:
fd:aa:bb:a4:76:ff:1d:e6:c1:32:59:99:04:62:35:
a3:c7:c9:13:61:c1:12:1c:45:8a:fe:aa:d3:37:53:
95:0d:5c:2b:d2:f6:63:e6:65:60:17:1f:d3:b2:36:
41:18:f2:6f:e5:b0:fa:78:1e:62:f8:3f:6a:c8:07:
64:43:a3:fd:4c:b2:06:b3:87:dd:3e:6a:58:94:17:
45:fc:12:4a:4b:5b:26:f6:55:f3:9d:6f:21:4f:de:
68:a0:b9:73:af:bc:e7:97:6d:73:55:7b:4f:1d:de:
fb:db:ee:bd:c7:ef:d6:ba:0d:31:57:f2:e5:e3:46:
61:bd:69:78:60:1f:6b:7c:63:16:71:56:c0:83:08:
c2:f4:a4:7c:59:d6:fa:06:82:9e:70:57:ae:ca:07:
7b:b2:49:d6:ff:f7:e4:e6:a6:06:39:aa:21:41:42:
8c:87:36:59:42:f0:4c:52:60:42:2b:ef:a1:88:c1:
e9:a7:41:30:92:67:2a:2b:4c:be:99:61:da:05:92:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:8B:87:04:E5:18:6F:D0:15:C4:1A:A6:4B:B3:96:CB:59:3B:5D
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8c:00:6d:0b:3c:75:cf:44:36:e6:88:21:20:6f:d2:9d:8a:
37:ce:ab:71:53:1c:d4:2f:7c:65:61:9b:64:18:68:57:03:ee:
a6:28:f6:6b:4d:0c:34:0f:79:40:ad:30:57:30:6b:c8:f7:62:
ae:36:43:e3:d5:b9:61:aa:de:ae:44:5a:63:1a:55:42:36:fc:
a8:82:de:c0:90:16:a4:c2:91:13:b6:9d:25:d8:51:4a:24:f5:
42:4b:65:b5:65:e3:38:f2:ba:d7:66:f5:90:bc:d3:22:2c:50:
83:32:33:1c:75:ec:c2:ed:ba:9a:b6:2e:10:6d:43:80:7f:3b:
a7:bc:74:9b:ce:d1:1a:52:f1:75:f2:d4:fb:e8:28:f6:1b:f5:
53:05:44:20:27:c3:90:f9:77:07:5b:51:e5:fa:d0:31:e5:8d:
3a:ce:45:2b:2d:d9:e7:54:85:c6:6c:69:55:8a:31:7c:d9:ca:
90:23:cc:5a:93:66:5c:d3:d0:77:c0:4f:66:59:b1:93:cd:4d:
5d:09:32:df:b0:63:93:af:c6:a4:e5:80:4e:03:9a:0c:a7:1f:
aa:ef:4c:5f:ec:34:44:25:8f:d4:09:ef:27:a7:4f:4c:54:40:
1f:b5:9b:32:23:6f:5e:4c:42:e1:7e:c2:7c:df:bc:cb:70:33:
3e:fb:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:51 2026 by rpki-client