Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: 5FcXJk+g5V1O1TRD7QRfkpHzTMTYSHWfovOf3LrFGdY=
Subject key identifier: 9C:17:B1:55:4C:01:DC:3F:74:BF:B3:93:10:4D:49:BB:C9:7F:D4:CA
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 019D98F49BC2294EB654F893720F5065D02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: D9
Signing time: Fri 17 Apr 2026 01:01:00 +0000
Manifest this update: Fri 17 Apr 2026 01:01:00 +0000
Manifest next update: Sat 18 Apr 2026 01:01:00 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: +V1Jb1v7qpNzXqBtFWzy5SO/YBa0mhvlxemRKlKuacE=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9b:c2:29:4e:b6:54:f8:93:72:0f:50:65:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Apr 17 01:01:00 2026 GMT
Not After : Apr 18 01:01:00 2026 GMT
Subject: CN=9c17b1554c01dc3f74bfb393104d49bbc97fd4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:82:f7:f7:b6:59:39:12:54:48:94:2b:07:
c9:b1:6e:32:93:3a:c8:10:c5:af:f7:18:d3:13:a8:
b3:0a:90:bd:3f:0c:dd:3c:00:4d:69:20:59:28:fe:
0c:44:4d:00:85:d1:89:99:5c:54:2f:f3:64:b9:3e:
1e:51:67:f1:0d:80:42:72:0b:db:d7:35:1c:64:7f:
bc:6b:07:e8:6a:5c:72:04:07:fb:32:33:75:65:b0:
86:e6:ff:39:6d:b9:72:f7:19:ff:4c:9e:4a:c8:10:
f2:e9:c7:4b:8f:dd:38:e6:af:02:75:38:ef:fa:dc:
a3:a4:a1:93:38:d6:97:af:fc:6a:1c:be:3e:de:be:
9b:f2:ee:41:61:97:16:fe:e7:8c:5e:9d:66:04:0d:
9a:5e:3a:b9:d4:c1:9b:18:27:6d:fe:f5:39:ca:b5:
a9:16:b0:83:b3:36:be:0b:14:31:35:dc:8a:a9:84:
05:89:8e:21:16:16:16:00:f6:86:0d:da:28:e9:91:
b8:d9:23:89:7d:f7:8a:d5:2d:9c:61:53:2c:25:cf:
08:e7:60:64:7a:36:6c:e7:85:1d:2f:ed:5c:9e:d5:
45:f8:f9:6a:77:12:94:22:48:72:c5:18:f6:dd:0a:
42:9f:77:73:cf:83:2a:a9:eb:d5:c3:6d:30:c6:bd:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:B1:55:4C:01:DC:3F:74:BF:B3:93:10:4D:49:BB:C9:7F:D4:CA
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:a2:58:21:be:1f:ba:21:00:45:9d:19:9d:f8:3a:ef:f3:
6a:42:c6:83:e2:2e:1d:8d:8f:25:50:46:ca:f0:5e:60:67:bf:
a5:6f:28:55:b4:6f:d9:50:8e:93:d8:04:4a:78:a2:ff:e9:5d:
79:66:e9:08:52:53:48:4a:3c:50:07:3e:2a:8e:50:81:47:89:
f1:e7:92:95:e6:d3:26:16:11:2e:b5:89:19:b3:7e:b0:6d:78:
60:62:df:cf:07:b9:f3:c7:f9:d5:e2:e7:c3:93:b1:ac:48:95:
98:a3:bf:5a:fd:28:d5:87:c3:8f:4a:5b:71:db:6d:50:4e:3b:
42:be:11:91:ea:ca:8b:2f:30:bf:e1:1d:0e:43:f9:e6:9d:a2:
ae:3a:16:d6:c0:0e:77:5b:79:94:21:24:53:2a:83:e7:2d:da:
b7:e1:f1:39:cd:14:4f:06:11:7a:2f:f8:8c:55:37:d1:75:7d:
aa:05:a0:6d:85:b4:c1:06:1e:74:1e:67:1b:95:3b:3f:1b:d5:
c3:2d:70:b2:06:8c:d8:53:ec:f8:f7:f3:2d:91:34:33:4b:e5:
15:21:22:a6:84:20:37:e6:f0:22:fb:78:15:47:d3:54:b5:a4:
c7:9d:21:d3:2a:2b:d5:12:c9:39:42:a9:04:15:14:a3:db:da:
56:3c:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:21 2026 by rpki-client