Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: B3v6Q0TeqhgDzWRUDdXagPvHPl77gB27tke1nfhom7Q=
Subject key identifier: 44:4C:EA:FC:7A:B0:78:DE:43:5C:B4:1E:B0:8B:C1:A7:02:F4:1D:F1
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 019D98BD5A838132564C0AF7ED8E7AE9CA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 00:00:39 +0000
Manifest this update: Fri 17 Apr 2026 00:00:39 +0000
Manifest next update: Sat 18 Apr 2026 00:00:39 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 31KJy7aS5USP1MTmhmTCBwEkZtRtcPHLvEncWajuxaw=)
2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:5a:83:81:32:56:4c:0a:f7:ed:8e:7a:e9:ca:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Apr 17 00:00:39 2026 GMT
Not After : Apr 18 00:00:39 2026 GMT
Subject: CN=444ceafc7ab078de435cb41eb08bc1a702f41df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:01:67:ac:56:f1:08:c3:86:16:a5:5c:dd:
5e:d4:0e:b9:d9:09:9a:b0:00:f4:33:d4:d8:c6:e1:
04:f5:c0:7c:0a:dd:a9:2c:0c:6f:bf:32:94:e2:73:
95:0d:7b:47:1d:52:22:96:fd:34:96:06:6c:3a:f8:
b9:81:4e:7e:f1:1b:b9:f1:df:54:80:fd:b8:31:cd:
4f:40:30:e2:6a:f0:50:61:f3:89:ed:3a:ec:de:bf:
40:d1:ab:77:8c:06:62:72:64:32:da:6f:bc:0f:e1:
7c:36:22:a6:c7:31:78:10:94:bb:a8:27:cd:22:9e:
b4:6e:54:b3:09:ae:a3:c6:5c:b5:72:94:ff:45:63:
cc:2b:2f:06:e3:98:c4:92:79:46:d5:a0:89:63:ae:
3b:d1:e7:c9:9e:4d:07:fb:0d:3f:54:65:4f:a6:0c:
57:68:d7:ef:79:aa:1a:3d:4e:c8:83:66:10:43:27:
82:8d:25:af:ca:5f:d1:16:a9:bf:f9:90:2b:1f:47:
10:f7:0a:59:2a:ca:e2:0e:9f:94:17:a7:12:93:77:
b3:5d:c4:58:51:b3:40:a1:39:23:19:f6:95:fc:23:
87:5d:1a:e3:b2:9c:11:e2:2e:ec:50:eb:e1:4d:95:
fe:aa:2f:c7:79:68:9f:0e:65:6d:57:10:ab:d0:fb:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:EA:FC:7A:B0:78:DE:43:5C:B4:1E:B0:8B:C1:A7:02:F4:1D:F1
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:50:99:5b:dd:ba:03:c0:54:4d:a8:01:93:cb:2e:16:e7:85:
4a:26:0d:b3:27:c6:a0:c1:9f:c2:3a:71:77:59:59:52:8f:a7:
cb:f9:86:c6:f9:e4:e5:5c:96:89:92:76:5a:a5:7e:31:d7:18:
dd:8e:29:e0:d2:19:41:5c:cc:08:98:91:de:00:55:6b:ab:02:
51:ce:a3:e2:d3:fd:dc:9d:55:32:b8:91:67:b1:85:e1:6f:e5:
6c:23:f4:2a:9e:10:e1:4b:08:ba:a3:31:1d:be:df:ae:e8:7f:
64:5b:1a:bc:98:f2:5c:37:d7:c3:42:f3:af:b9:72:d8:e7:8e:
19:e8:fb:44:14:23:8c:a6:a9:70:2e:63:79:ad:99:d1:ef:bc:
c4:23:d7:f0:d7:93:ac:ff:52:f6:6c:e4:9f:f7:53:a2:c8:4e:
cc:91:3c:b6:3f:95:38:44:2b:64:e8:c2:48:db:67:02:6b:8a:
84:3b:9e:c0:20:5a:d6:6c:bf:77:b0:0c:4a:94:1a:b4:e4:40:
5b:ce:b4:60:54:54:91:6e:f8:80:ee:c6:94:aa:d8:28:8b:40:
56:e0:e3:c9:2c:e3:5e:73:39:25:7a:b0:f1:0d:8d:02:74:58:
0a:71:90:d0:5a:18:52:19:8d:55:e8:b4:31:60:59:13:46:31:
8c:73:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:34 2026 by rpki-client