Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: EwqHZLrK2K+zVPk1RB9MvAnWHs5W6/126lOdxgcV45o=
Subject key identifier: 4D:BE:6C:A4:FC:F0:0F:14:65:FA:D3:E2:AA:8A:75:15:51:AE:E8:16
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019D97E21A9E35600FC8815780168A25DACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0A96
Signing time: Thu 16 Apr 2026 20:01:10 +0000
Manifest this update: Thu 16 Apr 2026 20:01:10 +0000
Manifest next update: Fri 17 Apr 2026 20:01:10 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: mb4tWCTkYkhxgYftEXvXoTmlyGDmdaWwSbKRBmLJW5I=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:1a:9e:35:60:0f:c8:81:57:80:16:8a:25:da:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Apr 16 20:01:10 2026 GMT
Not After : Apr 17 20:01:10 2026 GMT
Subject: CN=4dbe6ca4fcf00f1465fad3e2aa8a751551aee816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:87:57:07:72:32:8e:cb:db:8d:99:3c:99:
68:06:7c:76:07:f1:9f:c9:ad:e6:68:de:3f:85:39:
21:69:2e:68:d0:91:29:e3:3c:b2:88:2f:b2:93:1d:
1e:02:8c:2c:43:5e:64:a1:7f:b5:bc:7e:af:e3:75:
24:bd:8b:10:6b:0d:e6:45:94:cf:7b:a4:d8:cc:75:
df:fb:c9:22:ce:40:05:31:47:73:1f:16:8d:d2:7d:
13:3a:af:a2:54:44:6f:91:37:a8:fa:bf:f5:d1:43:
aa:a5:3f:45:c0:60:99:0a:ac:9d:f3:b0:88:d8:dc:
cc:7d:52:16:db:7a:b8:c2:98:d8:75:c0:7d:90:51:
46:0d:2c:5d:0e:4c:b5:ae:25:d1:70:16:5d:1f:c4:
8a:e1:22:84:d0:a7:51:b4:13:51:cb:e5:6b:85:63:
c2:75:1a:44:74:0e:05:36:58:26:25:eb:ff:17:50:
ca:76:3e:b7:d9:b7:62:50:bd:83:22:76:00:85:c0:
7d:fe:81:56:6c:5d:a1:f6:c7:f5:f5:d4:f8:90:f3:
01:62:76:97:20:86:ba:5f:b2:e0:91:77:9c:ee:5f:
2c:8f:e0:2c:e1:5c:54:fe:df:ef:e9:39:4b:b6:a4:
6b:62:32:64:fe:2d:28:40:fc:ab:8f:fe:b6:cb:17:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:6C:A4:FC:F0:0F:14:65:FA:D3:E2:AA:8A:75:15:51:AE:E8:16
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:4c:7c:7c:57:ac:37:02:b1:05:89:64:ae:54:ad:8d:b1:
c7:f9:e5:ad:87:18:1c:aa:a3:8a:70:bb:e6:f2:4b:0c:f4:e4:
d1:2d:cc:f3:9d:dd:de:26:db:9d:29:f3:ac:0c:01:9d:8a:b5:
83:e9:d8:0e:93:8d:41:12:ce:a0:3f:90:2e:f5:0d:9c:9e:f5:
52:dd:c7:e5:2b:c3:90:2e:74:6d:43:69:91:44:7c:72:a4:c3:
2d:3e:57:7e:91:52:51:74:c3:ac:13:05:0b:e5:df:37:63:e8:
35:e0:87:50:e1:6e:40:ee:27:4e:fc:2e:d9:dc:a6:48:a0:24:
1b:c2:2a:29:5b:5f:14:39:70:6d:8a:e6:a0:15:8e:68:0c:07:
54:a0:76:d9:c3:7a:6a:57:07:dc:92:4e:0a:c0:67:34:02:ce:
2a:54:db:84:8a:b2:69:75:21:85:24:f9:08:9b:13:5e:54:bc:
1d:87:82:61:29:19:b0:46:03:fc:d2:8c:4b:12:12:54:62:82:
c7:c3:e8:73:45:17:b8:71:bf:59:7e:e5:c5:c6:9b:63:05:21:
18:0b:bf:f3:00:e4:d5:88:df:42:a4:46:71:29:4f:8c:d2:55:
a7:8f:6c:ec:52:78:05:6e:a7:9a:3c:16:0e:85:18:dc:25:c1:
57:3e:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:37 2026 by rpki-client