Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: vUG3LOa21JS7Toue3zrjNBxcQH3eOD6TF4eeqjd8hv0=
Subject key identifier: 9F:E5:D4:97:F1:B9:69:D0:91:98:24:73:B0:2A:15:2B:14:24:81:B9
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019D99993C837E4BAD7C36260EBC0C639B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0BE0
Signing time: Fri 17 Apr 2026 04:00:49 +0000
Manifest this update: Fri 17 Apr 2026 04:00:49 +0000
Manifest next update: Sat 18 Apr 2026 04:00:49 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: dO/vB5ZJVOqN8CLxmkb2xe/JBGH3x4J/dYFlHbxaWTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3c:83:7e:4b:ad:7c:36:26:0e:bc:0c:63:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Apr 17 04:00:49 2026 GMT
Not After : Apr 18 04:00:49 2026 GMT
Subject: CN=9fe5d497f1b969d091982473b02a152b142481b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:ae:1b:27:2e:30:97:31:f1:f7:8f:da:9f:
f9:0c:3c:b8:f7:0b:0e:2a:1b:93:4a:23:50:ed:f5:
c7:36:fd:0b:39:9b:6a:5a:ab:b4:0c:5c:13:4a:6b:
18:a5:7d:b5:af:a4:44:7a:cb:e8:ce:3c:09:98:db:
64:83:18:9a:c8:d3:1b:0f:c0:b3:ec:a4:b6:67:b4:
8b:f0:57:32:d5:ce:6d:bc:a7:ee:3c:c0:3f:52:f6:
1e:c6:ac:ed:18:48:53:3b:e8:66:8e:aa:64:f2:52:
66:85:43:db:40:34:97:f4:48:4f:b9:a7:da:b8:76:
ad:12:c0:85:63:98:e8:60:d6:a7:6f:87:5c:c1:9c:
11:51:8a:22:2e:94:7f:76:4b:2e:d6:2f:70:2e:bf:
61:9f:c7:8d:c2:5c:68:86:fe:91:db:f7:76:0a:77:
02:03:45:6a:87:09:e4:ac:e2:0e:a9:bc:eb:e5:57:
fe:ee:50:a1:8f:d5:a0:6f:c0:10:9a:b5:0b:d8:9d:
92:60:f1:54:25:df:ea:ea:27:c8:94:92:b8:c2:2a:
19:e4:06:a6:2b:d6:ab:c8:3c:a2:42:79:ad:61:ed:
d8:03:ef:5b:8d:00:84:1d:d4:8b:b5:d0:81:5f:0d:
9a:2d:16:56:7d:e8:ba:fe:d8:0d:87:36:21:50:5b:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:D4:97:F1:B9:69:D0:91:98:24:73:B0:2A:15:2B:14:24:81:B9
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1a:d4:3d:35:b9:c2:d7:09:4e:a9:cd:42:19:06:2e:9c:22:
37:77:27:9a:be:b7:3c:b1:c4:06:37:e8:f6:cc:9f:78:1e:79:
15:a1:0b:64:19:cf:aa:ac:2e:e5:21:8f:57:4d:91:c9:27:1b:
95:82:ce:de:7e:76:ed:dd:56:b0:01:b6:7b:4e:b9:5c:e8:d7:
c9:4c:cd:a3:74:07:5d:06:13:70:a8:b8:df:f1:e6:fd:8a:75:
9d:2e:77:7c:44:16:1c:3c:ec:70:f5:cf:49:c0:fb:60:ac:83:
77:ea:1d:e1:97:e1:50:79:56:c8:3a:5b:cc:db:33:dc:38:45:
8c:c5:47:24:35:5b:91:31:02:8d:98:8d:df:ac:2e:87:d9:d8:
b5:1e:ba:9a:5d:01:2d:a1:4a:9a:e0:e5:c1:7b:05:20:14:33:
84:e7:ce:0b:66:a5:34:d2:45:16:15:fc:34:dc:ff:c2:50:a0:
42:c0:87:94:9f:4e:7c:17:5d:9a:c6:02:45:89:bc:c2:38:80:
f9:02:bc:2b:c1:b0:72:75:02:7f:5f:18:d2:77:9e:00:97:d1:
68:c7:0d:2f:7b:c6:75:76:f7:49:dd:b8:d6:d2:27:15:e0:6c:
9d:70:d2:4e:ff:8c:49:0b:9d:5d:55:1c:60:da:6f:25:86:4c:
14:b7:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:47 2026 by rpki-client