Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: zL5Or0UfpNrCGQ+CVJTARQdwyQDtRh6P/k6OeCJeV/w=
Subject key identifier: 9B:63:30:ED:ED:DD:AA:17:90:E0:40:4E:82:E5:E2:37:E2:50:A5:56
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019D97E191B0537B544434DDD826BEE90510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1503
Signing time: Thu 16 Apr 2026 20:00:35 +0000
Manifest this update: Thu 16 Apr 2026 20:00:35 +0000
Manifest next update: Fri 17 Apr 2026 20:00:35 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: RaOlwyfMZFKrnoUJRqo3K3P6gA78YEkoVtFMGkGSO8g=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:91:b0:53:7b:54:44:34:dd:d8:26:be:e9:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Apr 16 20:00:35 2026 GMT
Not After : Apr 17 20:00:35 2026 GMT
Subject: CN=9b6330ededddaa1790e0404e82e5e237e250a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:c2:74:be:e0:20:f9:7b:ea:ad:f2:e3:ad:
1d:50:99:7c:58:5a:a7:aa:b0:ce:86:89:fe:c0:1e:
9e:b0:19:41:e6:d9:66:95:9f:72:a6:73:e8:48:4c:
2c:28:3b:fc:e7:66:d5:34:f1:82:03:5b:8d:39:c8:
e0:52:d9:f9:d4:e2:7d:eb:73:a8:4a:c9:19:45:37:
0b:53:ab:21:45:ff:cd:ba:bb:0e:39:97:c4:e1:df:
c5:f6:46:ce:7b:7e:db:eb:5f:da:f8:62:92:f2:ee:
37:c0:6d:af:5f:e1:37:b1:e9:a6:bc:2c:a4:12:09:
8a:8c:6d:db:da:66:ef:e4:9d:86:cc:7b:a2:c9:a4:
a1:75:6b:98:a1:90:69:c3:c6:91:34:52:c9:c1:4c:
c8:88:aa:b6:f5:3a:65:05:7e:b5:dd:1d:b7:20:6e:
4f:64:21:df:99:15:4c:b1:e2:8c:ed:fc:67:44:47:
ad:b9:dc:e1:35:83:04:48:70:44:5a:64:92:a7:65:
e3:ee:39:56:5f:d3:ae:01:2a:c1:b7:fe:9e:85:6f:
24:82:06:00:9f:90:bb:d7:da:37:79:e7:e8:60:44:
dd:a8:89:75:b4:30:6e:7d:a4:9f:4f:da:5f:17:2c:
81:99:96:29:05:90:e4:81:60:ce:5e:2d:0b:95:2a:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:30:ED:ED:DD:AA:17:90:E0:40:4E:82:E5:E2:37:E2:50:A5:56
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:ee:a4:6e:f6:68:d4:9c:79:3e:3d:51:b0:eb:e1:06:c0:
8a:b2:0a:8f:93:6e:b8:c8:bd:01:fe:1e:9b:ee:c5:98:0f:b4:
76:7a:69:46:3e:d4:59:28:15:49:e3:ea:16:1d:9e:d3:f3:70:
28:d2:d2:bf:fd:42:9e:5e:99:01:b5:d8:61:50:da:0c:5b:63:
59:32:f8:cd:2a:6f:38:db:e3:0c:3f:12:ff:58:e1:95:83:79:
3a:ca:f0:55:78:1c:91:42:8b:a2:99:1a:fb:78:51:9b:01:9e:
0e:4e:bf:76:43:5e:93:ba:3c:9c:25:01:42:80:4d:be:2b:06:
5b:e6:71:de:52:81:da:39:a9:43:65:61:a2:be:86:71:e6:2e:
7c:99:62:a6:1c:92:bd:01:fe:6f:02:9d:47:e9:f1:62:89:ac:
54:03:0d:11:ea:cb:b5:41:7a:db:51:6b:c2:a2:e2:7b:06:c4:
08:99:cf:c3:34:ff:42:63:cd:9c:9c:13:fd:4d:d5:3a:83:50:
a6:fa:e4:9e:58:56:63:24:53:8e:0a:71:f3:07:d6:df:af:01:
88:1c:9e:f9:d4:76:35:34:d8:21:65:50:a2:b8:74:d0:66:5c:
71:d9:10:85:06:e0:bb:62:0d:c3:0b:9f:1c:98:83:d7:54:ed:
78:eb:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:35 2026 by rpki-client