Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier: K5ICEUdDUPh6hWBE+DdPAdQRlkiuM2vxSz2OcdSuAM0=
Subject key identifier: 55:6A:DC:C4:50:A6:36:1F:D8:5F:0F:E3:47:29:FB:86:AA:63:CD:EC
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer: /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial: 019CAA21F6478AFFED8B319771FCA4A55E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number: 17BD
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: cvU6u9m55J8/8HCpHlu9URJWsxFdwUJegsfrK0RWq4I=)
2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f6:47:8a:ff:ed:8b:31:97:71:fc:a4:a5:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=556adcc450a6361fd85f0fe34729fb86aa63cdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:26:51:99:bf:43:45:d0:02:c5:a7:80:ab:
7f:d2:cc:28:9e:d6:4e:15:39:e3:d2:21:a2:1d:fb:
08:e0:dc:55:3f:ee:17:de:3b:6d:bc:5a:d4:12:76:
85:03:0f:0f:b0:75:76:0d:62:59:24:31:ca:3e:48:
1c:13:77:56:a8:e7:b7:aa:28:54:19:e0:57:d4:c5:
63:4c:1b:6b:e2:f0:01:9d:ec:a1:3c:b3:04:27:aa:
d9:37:cc:22:c9:69:6a:ff:96:31:34:bc:0d:c1:7a:
14:01:c3:cd:cc:a7:e2:8e:30:c8:18:c0:8a:77:fe:
af:4e:06:ac:fa:da:88:a4:77:62:cd:20:b3:8a:b9:
3b:7e:8e:f5:5a:f2:3c:b3:27:f7:65:6c:74:c0:ca:
4a:f4:df:d7:cf:cf:b9:83:97:11:2b:55:39:e9:a3:
48:99:41:0a:2f:0b:87:1a:ac:97:d9:10:1e:b1:3b:
90:69:fc:6c:25:18:36:5f:04:10:17:07:c7:d7:05:
44:b7:e7:96:a7:75:69:e7:24:dd:cd:fc:1d:65:96:
18:4f:14:50:7f:d2:13:cc:57:89:46:54:ca:59:8e:
69:bd:83:68:3a:32:09:e9:b2:63:97:66:2c:06:c4:
ec:17:6a:30:c0:81:a5:1c:fe:06:65:3b:90:d2:00:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:DC:C4:50:A6:36:1F:D8:5F:0F:E3:47:29:FB:86:AA:63:CD:EC
X509v3 Authority Key Identifier:
keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:cf:06:8c:46:78:5a:da:71:10:f2:8f:72:4f:3b:af:e4:
aa:ed:11:b8:a2:d9:b5:cc:17:4f:a0:2c:50:8b:a0:5f:2f:f1:
9b:3d:ce:e9:bc:bf:84:f9:e7:27:2d:cd:bb:ce:f8:52:7e:a0:
ba:78:49:39:19:54:18:a1:1b:3d:ec:1b:ac:de:27:21:c5:39:
f2:19:43:af:c8:75:35:80:be:f3:fd:5c:81:94:b0:a3:87:47:
d8:47:8f:9d:80:12:1a:81:7c:d0:39:b9:46:eb:39:bf:a9:71:
d4:3d:73:2a:da:c7:9f:96:bb:b9:cd:13:98:73:9d:1c:b0:1f:
7c:aa:56:7a:29:e9:49:17:94:47:f3:30:bf:a2:33:df:35:e6:
ce:44:f2:9d:33:c8:fc:49:6d:7e:ac:60:b6:f0:f9:50:17:53:
4b:e1:1c:84:e1:76:6a:4d:89:d6:ca:99:4c:2f:ff:7b:d1:ec:
76:41:b1:93:7f:18:23:9e:60:a1:b8:3f:98:cc:c1:02:54:86:
57:a3:75:0c:8b:75:4a:7b:f9:cf:db:89:40:04:67:4e:59:95:
bc:ed:f9:41:1f:e0:38:55:a8:ef:1c:0a:7c:88:e9:ec:3b:7f:
7e:32:d3:8d:00:31:d1:fb:50:c8:02:b0:2e:ec:e2:97:84:09:
28:12:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:56 2026 by rpki-client