Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: B7k52o7Id0LP8MoKLlcP4aEUOSyZfAwQQxrybbHRjbI=
Subject key identifier: 67:92:5F:9E:86:60:B9:CA:76:E9:00:0D:C7:E6:EE:0B:4B:05:5A:91
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019D9AE2ACA47D0C48F2C9A2A28E963B584C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 10E9
Signing time: Fri 17 Apr 2026 10:00:39 +0000
Manifest this update: Fri 17 Apr 2026 10:00:39 +0000
Manifest next update: Sat 18 Apr 2026 10:00:39 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: PAHPntFsRNchwFUC7bcHgbteLowuIQ54qpmRt9tpm6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ac:a4:7d:0c:48:f2:c9:a2:a2:8e:96:3b:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Apr 17 10:00:39 2026 GMT
Not After : Apr 18 10:00:39 2026 GMT
Subject: CN=67925f9e8660b9ca76e9000dc7e6ee0b4b055a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:e2:b1:63:4b:e7:c9:e2:eb:9a:78:2f:3a:
c3:f4:d6:79:54:14:df:a5:00:c0:e3:38:bc:f0:6c:
ad:b4:d6:ba:c4:eb:ce:f9:52:63:ad:c9:75:bd:bb:
0d:61:99:27:40:f3:db:f4:33:33:df:e3:e0:0e:af:
4b:a6:16:bc:09:8d:01:9e:ad:86:ed:e9:dd:e3:d5:
03:d6:7c:ae:fd:4e:3d:70:b3:63:ec:ab:a4:d1:89:
2d:f9:ec:98:8d:37:64:7d:3f:0f:2e:e0:b0:d3:9c:
bc:fb:73:25:66:43:b6:55:38:29:d6:af:02:28:3e:
18:94:1b:a1:de:25:6f:d6:5a:11:7f:ff:fa:9c:ab:
ee:67:6f:7f:70:63:fd:c0:6c:ae:8c:89:a6:d8:23:
fd:1f:76:08:1c:0b:fc:96:f5:f2:50:f7:7d:69:79:
c9:24:a4:11:d4:80:e4:b8:6d:4b:9d:ac:bd:90:15:
36:81:ce:0e:22:15:04:c1:83:43:87:e6:27:1d:1a:
6a:01:61:d6:8d:7f:94:1a:15:f2:39:07:4b:3b:84:
d5:1e:ce:a2:d4:14:fd:56:c2:0b:a7:a3:52:3b:c3:
9b:1a:4e:e1:cc:a8:fc:e5:16:ec:25:a4:4b:7c:ef:
49:ed:55:d2:a5:d6:b9:b1:80:85:7f:db:f7:f9:97:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:5F:9E:86:60:B9:CA:76:E9:00:0D:C7:E6:EE:0B:4B:05:5A:91
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:d7:38:c6:14:64:6a:56:20:8f:05:76:80:fa:2a:24:82:
58:91:67:66:51:1d:13:94:87:73:01:1b:ba:a2:7e:7e:96:da:
10:ec:4b:c4:64:54:58:f2:3a:5b:13:69:9c:65:bb:8d:a9:76:
8b:fb:2f:34:c8:19:cc:d9:27:c3:da:de:8d:ad:61:39:fb:b1:
b6:3d:06:d2:03:90:63:20:42:cf:5c:e5:0c:15:48:49:de:9d:
28:ff:1f:79:7d:d4:f2:38:40:f0:98:39:0a:ec:a0:21:90:e7:
27:3b:91:cb:6d:c1:d9:57:01:29:b1:38:37:0b:92:48:95:76:
33:b7:b8:cc:87:26:40:6f:c8:c1:68:72:7e:f0:cd:06:90:69:
67:39:b3:39:e4:c5:2b:49:b5:91:4c:8f:60:52:0d:2b:a7:a9:
d1:93:30:b8:70:a7:a3:92:96:44:88:46:15:ae:a2:c8:44:85:
a6:81:2d:81:a1:f1:f8:d0:3d:35:db:c0:02:ae:c3:8d:e5:9e:
05:42:71:7d:0a:f8:5f:40:26:9a:38:d4:b7:c8:92:2f:23:34:
51:d9:9d:3b:6d:68:36:de:23:2a:54:46:79:ac:88:5d:64:86:
14:bc:c8:b3:82:a7:92:22:ac:2f:67:95:68:f9:45:20:a2:60:
e1:4d:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:49 2026 by rpki-client