Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: tDytHekTQsm5XTIuHUQu+GrUnLqbUL0mL7aZQ5uImBA=
Subject key identifier: 55:96:78:BA:5C:45:8D:59:E2:02:09:26:57:24:2B:FD:04:E4:DE:54
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 019D99621C87525174A368B64D1C8DD4BFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 1475
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: Lyr2Tv4b7lB1A5FwfR/4mtE/o/WGUNAp77kA7H8oeNc=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1c:87:52:51:74:a3:68:b6:4d:1c:8d:d4:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=559678ba5c458d59e202092657242bfd04e4de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:0e:b4:ba:ff:b4:e9:bb:02:2e:0c:2e:33:
6b:aa:22:52:67:0a:73:c4:e6:bc:f8:a7:cf:81:0d:
97:43:30:20:41:53:e4:7a:45:e8:04:52:2a:1c:21:
5f:21:9b:97:76:99:33:50:7a:4a:ae:b8:1e:93:b9:
ed:55:61:e9:45:44:43:09:8b:a7:0d:18:cd:ba:a6:
68:43:a8:e4:28:26:fe:84:9e:8e:d0:4c:76:5c:74:
77:26:f6:a9:c4:e5:0b:cc:2e:96:4a:c4:d4:b9:28:
38:78:05:25:4c:dc:08:79:30:65:9e:24:b5:96:b5:
23:8b:55:a8:e8:0e:92:87:d6:d6:d7:cf:ba:00:1f:
48:8f:0c:94:ce:af:4a:39:27:ae:75:f2:8d:bd:16:
38:79:a9:e6:f4:db:5b:4e:87:88:a1:96:68:27:d4:
ce:fb:33:f3:12:e1:a0:90:54:16:45:df:b5:b3:9f:
70:10:33:0e:f5:54:af:fd:cc:a0:b2:87:72:a9:15:
91:23:85:a5:91:1a:fc:06:46:5c:67:5a:ad:24:79:
36:15:64:98:06:78:7d:e1:0f:9d:40:67:c0:7f:3a:
4e:1e:39:7d:84:e9:05:8d:3f:db:59:dd:cb:73:45:
97:9a:4d:83:f8:6d:fc:05:2d:05:16:57:eb:4d:f8:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:78:BA:5C:45:8D:59:E2:02:09:26:57:24:2B:FD:04:E4:DE:54
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dd:31:d1:42:04:46:36:8c:7b:d8:31:8f:41:38:9a:c7:93:
68:cb:d4:0b:e0:d9:ac:ed:ef:cf:c6:68:11:1d:7a:d9:af:5f:
b9:5d:40:bb:9d:34:c7:d3:96:0b:1e:de:46:ba:90:bc:8d:c8:
95:de:05:f6:08:91:ee:cb:4d:48:df:11:77:01:96:ef:4c:24:
db:b8:df:ed:3d:6a:e2:9a:96:a3:6b:72:2d:45:73:3d:18:27:
f3:18:78:9d:ad:8e:af:e6:8d:be:78:3f:8a:f6:17:37:0c:57:
84:b6:b8:ea:4c:b4:00:df:a6:c4:5f:29:07:d7:40:b3:00:34:
84:ea:6c:de:11:c6:26:55:57:44:e9:1d:36:1c:7b:d8:2d:3c:
d4:e3:25:66:fe:c8:ce:66:03:ae:a8:09:a2:3b:59:2e:a6:43:
dd:8d:ea:bc:1e:8b:8c:6b:2f:0e:42:0e:bd:49:94:54:47:b4:
3f:4c:04:e7:0a:f2:44:b2:13:0f:5c:57:0c:57:52:60:5d:27:
98:c4:c1:06:17:e4:34:86:37:e3:b2:ef:05:82:a7:5f:e6:d4:
79:15:e5:82:4c:8e:82:d5:5e:78:9f:0f:0c:6a:d7:9d:ac:50:
a5:ad:91:72:ef:67:c4:77:bf:41:a0:1d:c5:a7:94:a2:b9:4a:
8a:64:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:32 2026 by rpki-client