Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: awvD8o9FaJD0cA7n4Yq1EwKg3DUbDCq899NlPOECjkQ=
Subject key identifier: 8E:25:8E:97:CB:96:ED:39:D2:F9:0A:6F:94:85:BD:1F:7C:AD:76:21
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019D992AF3F6872FDA7B645653ACBCCB02E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 150A
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: TY955DhK20nASJ0aLKpJKip53NcYLWfUS/RlTTuNbyQ=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f3:f6:87:2f:da:7b:64:56:53:ac:bc:cb:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=8e258e97cb96ed39d2f90a6f9485bd1f7cad7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:50:cb:67:f8:fd:29:f6:2c:45:ba:37:48:
35:f9:8e:7c:e8:d0:5b:1f:b1:7d:83:02:64:11:42:
22:ba:9c:f0:24:ca:33:d8:97:0b:26:d2:11:40:c2:
a6:cc:39:bd:17:99:a8:38:b2:b8:e2:b2:c1:ee:25:
33:5d:1a:94:ff:8d:14:28:f7:f6:9d:d9:2d:42:c7:
d7:4b:a2:37:8c:34:59:38:b1:c3:67:94:38:31:d8:
0a:57:2f:42:eb:79:f4:f4:ce:44:b1:d0:a0:98:bc:
86:bd:fa:bc:72:e0:e1:dc:00:aa:d0:8a:75:03:dc:
20:3e:1f:08:fd:40:0c:c3:d5:9f:11:43:30:34:63:
3f:31:a6:a4:1c:9e:f8:54:f2:42:0e:3e:39:0c:b5:
fe:90:64:52:96:33:a6:1c:dc:16:4b:42:eb:52:26:
af:00:48:18:f9:5e:46:62:04:de:34:25:31:8a:c1:
a2:fc:39:33:7b:31:c0:3c:52:76:bc:8d:07:f7:a2:
59:d4:75:98:e8:bb:f0:94:87:c2:e5:98:3c:d2:f4:
71:47:b3:a5:f8:b6:4b:43:fb:16:f2:c3:b8:d1:bc:
47:c2:e0:b1:54:09:ad:7e:f9:20:db:70:8b:69:b9:
2f:32:fc:ae:25:c3:ed:f2:83:38:07:ab:c1:ca:c6:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:8E:97:CB:96:ED:39:D2:F9:0A:6F:94:85:BD:1F:7C:AD:76:21
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3e:80:6c:28:d6:2c:b0:bb:78:32:1d:cf:9e:ab:96:23:ef:
71:c6:17:e3:8d:1a:ca:ec:98:1a:c3:7a:4b:85:c7:2d:f7:0d:
dc:e6:ad:e2:87:61:8a:dc:31:d6:b4:b8:eb:cd:58:db:a0:81:
dd:0d:77:1c:0c:6c:01:df:de:11:4f:72:f7:74:68:2b:a3:01:
02:cd:c5:42:73:87:1f:47:1e:ff:1a:cd:5b:63:1b:28:01:6a:
2d:ba:81:b4:41:fa:02:dd:45:3b:b2:f3:d8:e0:fe:52:e8:46:
70:cf:be:2e:88:8a:4a:13:49:9b:00:41:44:12:b6:a6:7e:0b:
f7:d6:86:66:73:ac:8c:38:f5:8f:7e:0d:d8:de:33:7d:c2:87:
96:f3:89:67:4d:d0:5d:c0:cd:7a:0d:ad:9c:e4:a6:30:7b:57:
f7:19:b2:6d:7b:54:b3:0d:1f:53:20:2e:b6:ae:dc:ff:91:0a:
e7:f3:41:cb:e6:4f:78:7d:f2:81:23:88:2d:2b:f7:fc:90:e4:
61:ab:a6:94:2a:9d:be:bc:fa:71:fb:ea:30:b5:f2:81:b1:46:
3e:19:89:3f:b2:1d:10:bb:29:08:85:ba:f5:d8:77:52:04:2b:
90:80:1a:5e:96:db:19:f9:fa:a4:ce:8f:f3:be:63:05:50:62:
28:3c:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:36 2026 by rpki-client