Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: gDJJKTq+5R7/CEj1vyF8yY2XwfXmsYydquAabab0PdA=
Subject key identifier: 8F:D3:5E:2E:20:9C:19:5F:A1:23:B8:D8:51:4B:35:1E:68:07:46:9D
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01A1DFBA074055377C7D07775CF574F71862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 15:01:13 +0000
Manifest this update: Sun 15 Nov 2026 15:01:13 +0000
Manifest next update: Mon 16 Nov 2026 15:01:13 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: rE4HgipKVcAZrAppGMf2E7lB/UAosFJipriRzKpL9ks=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:07:40:55:37:7c:7d:07:77:5c:f5:74:f7:18:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Nov 15 15:01:13 2026 GMT
Not After : Nov 16 15:01:13 2026 GMT
Subject: CN=8fd35e2e209c195fa123b8d8514b351e6807469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:76:d1:5b:2c:00:a9:d0:44:64:ad:86:e3:
37:60:23:5c:e1:21:ce:41:92:b6:6b:f4:8b:8e:f7:
8b:76:fd:1d:ea:73:31:50:36:ce:24:64:7e:c6:80:
b4:a6:0d:5b:c1:e5:ed:d5:ea:c7:01:de:89:76:1d:
aa:05:b5:19:5b:08:ef:aa:35:3a:26:3a:cb:8d:d2:
de:33:4c:99:63:5f:c6:9d:d6:a6:24:b4:b5:35:4b:
59:6d:5f:e7:44:a9:f7:59:fc:66:b5:b0:98:d4:83:
73:17:94:6e:7b:c6:41:08:6a:ee:3d:15:6e:ae:e6:
a0:bc:0d:96:b4:37:33:ae:52:3c:0b:e4:c5:68:27:
f5:69:59:b0:9f:33:9e:84:ba:c9:28:9f:1d:d0:2b:
bf:e7:e9:8b:55:91:7f:15:1a:7b:e0:4b:9a:9c:7f:
f2:ed:42:cc:15:f7:53:19:a6:e1:93:c3:74:54:8a:
85:a4:89:4e:62:9a:81:bc:d8:8b:6f:53:0f:a5:46:
65:fd:7f:db:5c:77:18:83:77:e4:12:4a:e4:8f:2f:
7d:a5:ad:9b:95:1a:2b:4e:ac:c2:f3:ac:9f:6b:e9:
1a:66:5a:3b:4b:b5:ce:d0:f8:dc:c3:19:97:40:75:
51:dc:17:95:6a:1a:2c:12:24:e1:71:11:a0:93:f7:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:5E:2E:20:9C:19:5F:A1:23:B8:D8:51:4B:35:1E:68:07:46:9D
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:d3:ce:b5:1b:cb:02:bb:47:d3:0d:f6:eb:7e:2a:43:b5:
bf:97:ee:87:b7:bf:b3:26:b6:31:4a:1a:27:c9:3b:34:5d:0d:
cc:2d:2b:f9:c0:84:5d:55:ea:3b:ba:13:b0:10:84:b7:fd:0d:
fe:72:94:d9:78:8c:6b:af:6c:f8:c3:ea:b7:c0:78:db:73:ca:
5b:73:34:07:15:7a:94:84:ee:ae:6d:25:0c:07:b3:3a:9e:cc:
56:90:76:77:6d:08:0f:09:46:26:85:72:de:11:3b:c2:84:03:
50:a4:e8:8f:f1:99:2b:96:7c:70:5e:e5:12:e4:30:a3:b3:ba:
08:64:16:97:4e:6d:1c:84:4f:78:76:2b:a1:87:f9:9c:59:e9:
bd:81:77:5e:69:2e:1e:05:52:51:df:af:c7:6c:db:3f:47:30:
65:64:d9:75:29:66:cb:d5:2f:29:e7:1e:f0:50:9e:61:c9:91:
e1:5e:0c:a7:7d:df:2e:7a:ef:22:ac:b3:0a:68:59:b6:28:e0:
af:7a:62:dd:22:e7:47:4a:59:3f:e0:44:63:fc:ef:fe:df:8f:
f6:9a:5e:c0:df:7f:14:fc:5c:5d:8c:1c:9b:1f:40:0d:a3:7b:
f7:df:75:a5:3a:53:6e:02:b4:aa:13:c5:50:61:0d:a7:09:3c:
cb:38:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:47 2026 by rpki-client