Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: 4ja7SfLoYMe9pBCzfVWg1kBUSDfYzUUeObavUEi0na8=
Subject key identifier: 10:B2:16:58:8E:94:DF:3C:28:34:42:92:F4:87:D6:B6:7E:6C:6B:7D
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 019D985099B79933DC39C07C9B4A91E93B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 1214
Signing time: Thu 16 Apr 2026 22:01:52 +0000
Manifest this update: Thu 16 Apr 2026 22:01:52 +0000
Manifest next update: Fri 17 Apr 2026 22:01:52 +0000
Files and hashes: 1: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: oEQnrhrSfUXDqUt/sC9YKsbs3qTVtlsiih5IZGfk7gc=)
2: h3ZDg5youB0K7vntlWcD6_hznfg.roa (hash: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:99:b7:99:33:dc:39:c0:7c:9b:4a:91:e9:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Apr 16 22:01:52 2026 GMT
Not After : Apr 17 22:01:52 2026 GMT
Subject: CN=10b216588e94df3c28344292f487d6b67e6c6b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:19:90:20:4d:86:77:85:05:2e:6c:ab:29:
9a:57:d9:f6:1a:36:90:e4:f7:15:c4:a7:3d:1e:18:
73:72:d4:20:2c:a4:7c:f4:30:12:71:d3:45:21:6b:
4f:be:b1:c9:f2:12:a4:0f:25:65:02:3c:bb:7f:64:
9a:a1:76:3e:1d:6e:26:fe:77:36:9f:1c:fc:73:1f:
03:90:a8:16:31:20:52:cd:3e:07:f7:d6:43:34:f5:
73:bb:ac:a9:b8:f8:07:25:e8:d0:eb:94:63:b6:76:
0f:4b:43:35:48:8d:7d:b6:d0:95:ae:c9:85:a9:37:
b1:b4:f9:79:38:ed:aa:63:07:bb:47:54:7b:f3:5f:
3f:e1:ab:0d:ad:d0:cd:63:f4:8d:5f:15:71:69:d0:
a7:0f:b6:7f:3a:2c:7d:2a:8f:e6:53:fa:b9:dd:18:
d0:85:e0:8a:30:db:d9:b1:be:8b:51:cf:a1:d5:e8:
87:ec:28:72:f1:b8:68:ea:f1:6c:46:02:c1:9b:93:
9f:6a:0b:84:21:0a:82:1f:dc:45:9b:e4:54:c8:fb:
c2:ba:06:3c:a6:78:25:e9:c8:46:4b:44:34:53:90:
64:cf:f7:1e:41:6e:09:6c:22:c6:62:89:ab:d7:41:
b6:2a:08:3f:7c:5a:36:66:46:ff:1e:54:a9:4b:03:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:16:58:8E:94:DF:3C:28:34:42:92:F4:87:D6:B6:7E:6C:6B:7D
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:28:e9:e0:2c:97:87:77:80:20:15:4d:4d:3b:6f:47:8e:2c:
a8:bb:e2:e7:eb:04:74:81:da:cd:ea:98:8d:b9:a7:6d:7f:74:
fe:46:6d:0f:db:51:07:26:3c:7b:c0:e2:80:eb:e9:e8:18:8e:
52:8e:e8:4e:b4:a3:1e:5a:80:32:2d:47:1c:e2:c2:b3:a3:7e:
2c:38:4a:17:03:23:02:e1:d2:5a:9b:a9:69:47:0f:88:18:79:
a2:0a:2c:a0:1f:b7:39:62:c6:56:84:79:cb:16:af:8b:aa:e5:
b2:08:ce:55:ae:e5:17:87:6a:60:de:e4:8c:24:f3:74:58:32:
76:22:88:49:fb:57:af:2f:01:04:15:19:c1:cc:ab:3b:15:c0:
71:10:74:20:35:85:6d:50:af:b9:53:a6:5c:eb:0a:18:3e:4b:
ae:dd:3f:55:11:c5:5f:23:3c:11:6b:67:d4:a5:1b:45:0e:8c:
16:86:5c:81:8e:31:e4:0e:e8:e4:68:d7:24:58:b0:4e:5f:7e:
f3:6c:2a:3a:15:7e:d5:73:e0:e4:5a:92:9c:6e:85:6a:38:8d:
4d:ad:70:bb:f0:aa:1c:97:8e:68:52:11:5d:53:86:6e:76:ea:
10:bc:35:ec:bf:28:c1:bf:ed:01:9c:95:28:57:8e:e2:53:94:
5f:4f:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:08:53 2026 by rpki-client