Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: FbhLT/76R9b50coFTM2YFcarmaCiDzTygyv9VG81eCU=
Subject key identifier: 0A:DD:C9:5A:F7:92:19:42:77:25:11:59:16:0C:B0:9E:00:F1:CF:5E
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019D9B50646F1EAE5BC481197CF771C3E5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0DE9
Signing time: Fri 17 Apr 2026 12:00:30 +0000
Manifest this update: Fri 17 Apr 2026 12:00:30 +0000
Manifest next update: Sat 18 Apr 2026 12:00:30 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: +tKLAnecU3HkJ2MTjrlA988PXRQbE+OHITw1uUmDu7k=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:64:6f:1e:ae:5b:c4:81:19:7c:f7:71:c3:e5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Apr 17 12:00:30 2026 GMT
Not After : Apr 18 12:00:30 2026 GMT
Subject: CN=0addc95af792194277251159160cb09e00f1cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:c1:8e:95:ae:7a:a2:02:5c:63:9d:d1:83:
67:ce:32:4c:65:c6:1d:eb:d7:f4:cd:dc:be:df:ff:
b9:ab:10:6d:46:ed:f2:6e:41:31:1c:cd:b3:69:15:
73:7f:40:ec:15:c4:85:28:3a:02:f8:2f:79:75:5d:
fa:0a:07:f5:cf:1a:ce:e7:00:18:83:b1:c1:37:e1:
00:e9:a4:53:6d:65:5a:cd:9a:84:84:30:96:d7:5a:
a2:bf:34:94:a9:7e:22:df:fc:da:03:2e:bd:57:68:
65:49:58:1c:22:85:e1:03:94:78:32:9f:08:c3:f9:
a1:32:55:7b:f3:61:fb:b6:13:24:87:5b:a5:d6:b6:
72:6d:89:60:b3:78:eb:25:43:6e:91:29:07:1d:30:
44:c3:4f:e8:a5:d6:af:9b:30:50:75:6c:32:01:02:
7d:75:12:02:4a:48:9a:1c:72:be:73:02:4f:0c:34:
f3:29:8b:76:a1:01:ed:56:18:6f:1b:7c:16:85:9f:
4f:41:38:7b:91:a4:49:8a:b1:da:07:5e:88:7f:69:
a5:0e:00:d8:bc:0f:10:c5:62:47:98:b0:be:b7:92:
94:93:4a:3b:10:2d:37:4e:86:65:c7:c3:cc:19:9d:
4a:d7:25:99:e0:34:de:94:7c:6b:a1:a7:96:51:c7:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:C9:5A:F7:92:19:42:77:25:11:59:16:0C:B0:9E:00:F1:CF:5E
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:46:ef:1f:86:e7:75:09:3f:be:c3:4d:da:09:d5:8c:7f:
5b:28:6c:b1:21:41:26:53:32:33:fe:29:95:25:e0:67:e2:3d:
b0:fc:f0:de:de:64:df:48:13:bc:e3:29:f0:36:89:d2:33:5e:
21:33:c1:49:31:67:c6:08:ca:0e:79:71:82:98:bd:ce:a5:e2:
08:aa:3e:db:89:a3:91:d2:db:35:6a:8c:31:f0:3b:72:39:c4:
9f:9a:07:6b:50:34:a2:cb:9c:53:e9:3b:9e:c5:f8:04:e3:ab:
94:af:9c:34:f3:1b:dd:59:4f:76:58:c2:42:94:3e:0d:70:66:
19:3f:fa:a7:dd:65:fa:e4:8c:9c:2e:12:19:11:53:24:58:dc:
85:de:ce:82:71:89:87:41:fa:fe:a8:7d:3a:17:53:c3:fe:cf:
12:37:3d:6c:c7:22:f2:bc:41:bc:83:71:6c:52:c5:bd:8a:6b:
56:10:81:8d:a0:30:d9:50:38:42:05:51:7e:dd:9b:84:0c:21:
ac:9a:9c:19:55:ee:95:92:fc:d2:00:a7:48:09:c6:63:bc:17:
11:45:ff:e2:fe:a1:be:de:f4:ac:27:e8:1c:e5:23:2d:ff:15:
f2:03:a8:79:1f:fb:aa:9f:77:d5:af:86:0f:d0:63:c6:f6:97:
67:5e:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:33 2026 by rpki-client