Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: D5ZW3q3sAf1m1mqTNZohFp6ff1DmIOKpmijFt9WOVfY=
Subject key identifier: A6:C7:A5:B4:1D:3F:AF:39:83:25:75:B8:D1:D3:CE:C7:D0:06:AB:D2
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01A0C3D723542691A109B12EFE4D4348DD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 12:00:51 +0000
Manifest this update: Mon 21 Sep 2026 12:00:51 +0000
Manifest next update: Tue 22 Sep 2026 12:00:51 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: b+OoPnIKNj3qTOjDAwiUCSUsG/9WJd4ZHu8O9JAnKc4=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:23:54:26:91:a1:09:b1:2e:fe:4d:43:48:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Sep 21 12:00:51 2026 GMT
Not After : Sep 22 12:00:51 2026 GMT
Subject: CN=a6c7a5b41d3faf39832575b8d1d3cec7d006abd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:35:a2:0f:0e:05:42:6c:9c:ec:05:2d:15:
3e:b0:d1:6a:4f:59:b5:af:0e:ee:35:a7:98:4f:52:
7f:20:56:07:e6:ae:da:a1:5b:64:2e:4f:d2:a8:36:
36:5a:11:11:89:a1:5c:6e:f3:da:55:57:e2:cc:af:
ea:19:41:47:c4:f7:6b:f0:12:2b:68:f9:46:ce:99:
99:f5:fb:12:7f:31:78:88:ab:a8:d7:30:01:1b:ea:
60:4e:3e:44:e2:80:76:b4:2f:68:53:5c:66:78:1f:
9d:16:6c:0b:5d:f6:03:d7:a0:da:07:74:11:2e:c7:
9e:88:00:61:1d:2a:94:12:b9:42:e9:bb:12:eb:a2:
1d:77:64:3e:5d:2b:ae:6c:e7:9b:4d:9a:7f:01:ab:
64:d9:a6:f0:d4:9c:66:c7:6b:48:25:65:a3:ba:f8:
3d:ce:68:e2:ad:95:5a:28:c3:09:bd:2a:4f:d3:a1:
29:53:d3:62:76:9e:7f:59:29:53:f4:8c:ef:85:4f:
1a:9f:bf:45:73:ad:6b:fe:d8:24:e7:8c:3e:10:f4:
6a:c3:14:bc:67:0b:73:d3:c5:37:d1:88:7f:ee:63:
6c:f6:f5:bc:e8:90:01:fd:86:00:90:6d:63:0a:a7:
61:eb:c8:f0:92:2a:70:40:4d:db:fb:89:8f:5b:a1:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:A5:B4:1D:3F:AF:39:83:25:75:B8:D1:D3:CE:C7:D0:06:AB:D2
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:65:36:5a:63:bb:9c:9c:ab:14:22:3c:73:f5:ab:58:ba:
36:c4:59:f2:8e:20:4a:5e:21:42:50:2c:af:e3:dc:a4:35:73:
9d:3c:82:d5:6c:2e:de:08:5f:72:b0:c1:77:ea:80:a7:ea:72:
08:13:06:15:2e:5e:5f:db:05:84:7b:28:2d:6a:f9:b7:18:2f:
d6:7c:d9:84:e1:35:14:39:2b:f4:bc:29:6f:9c:b6:d8:93:ad:
fa:8d:f5:e3:66:6e:b1:a9:16:1e:b4:42:52:67:99:a1:74:1f:
c0:77:b7:3f:18:be:1d:4c:79:56:b5:06:e2:b9:2f:ec:a2:6f:
66:c6:0a:f6:86:75:3e:29:dc:a1:44:98:69:f5:4d:5c:b3:ae:
63:24:f1:da:35:18:de:ba:bc:f7:31:28:cf:73:ad:e1:91:ea:
79:4f:f5:8f:e6:78:3a:fb:66:66:35:2d:df:70:66:d1:db:2e:
b6:14:ca:42:8c:6b:f0:50:d7:f9:a0:a5:78:e6:0d:32:eb:17:
bf:df:20:c6:7d:02:a0:ec:42:d7:aa:d8:06:f8:74:6e:dd:29:
52:d7:d8:d7:73:3f:b2:fb:83:69:20:ac:07:1d:3d:c5:8d:4e:
e5:ef:3f:2c:81:9a:61:d6:d5:0d:e7:57:31:8d:8f:40:1a:3a:
4e:ef:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:28 2026 by rpki-client