Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: YHVvw9LU4IOeRl0J+x7RVbmuWnbZy9sUT5AgaysXed4=
Subject key identifier: 3E:84:0E:02:F3:14:85:10:7F:C7:32:5F:7F:58:18:6C:1D:9D:DA:EB
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01A0C633712DA0255F4A337617CB67163517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0DE4
Signing time: Mon 21 Sep 2026 23:00:55 +0000
Manifest this update: Mon 21 Sep 2026 23:00:55 +0000
Manifest next update: Tue 22 Sep 2026 23:00:55 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: /6XX21pmKDMMsNZ7NZoWJLpERtAQYjI0rELQFUi7/sg=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:71:2d:a0:25:5f:4a:33:76:17:cb:67:16:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Sep 21 23:00:55 2026 GMT
Not After : Sep 22 23:00:55 2026 GMT
Subject: CN=3e840e02f31485107fc7325f7f58186c1d9ddaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:94:41:1a:36:35:23:15:ea:31:d0:cc:c6:
c1:b9:91:af:e4:8d:e3:cf:35:a8:78:63:9b:32:17:
c9:67:61:a1:4c:92:21:03:76:22:0a:8b:4c:15:dc:
41:7a:cf:dc:88:eb:58:de:bd:88:dd:95:a1:ec:9c:
03:21:29:db:fd:ba:86:10:56:4b:09:d2:3d:07:53:
fb:ae:8e:80:fa:44:d2:ac:64:17:6f:f7:da:d7:7c:
6b:c9:81:35:75:f0:f2:b3:fa:f2:0f:ff:5d:48:ff:
43:79:6f:82:03:cd:e5:b0:8d:6e:21:87:a5:b0:e1:
81:a4:88:d5:7b:63:3c:a6:80:00:d9:79:01:d1:c5:
32:ad:cb:3b:17:72:3b:d7:0b:03:9b:95:47:8d:f5:
fa:5e:04:be:2e:3c:b0:16:d8:27:6c:1e:9e:7d:2b:
02:ad:8b:00:49:f5:fb:8b:98:48:41:b8:d9:f2:69:
ee:24:7e:dc:68:c2:39:3b:92:d9:fb:18:b6:f1:20:
30:c8:d0:e9:bb:20:52:5b:12:d1:42:96:d6:85:7e:
5c:4b:e6:f0:d4:77:71:6a:01:ac:1f:97:c8:96:95:
f1:7b:3f:6d:ba:50:68:74:80:4a:7c:c9:d4:9f:59:
7e:5e:dc:ad:f8:6d:17:f5:9c:13:44:f8:da:d7:a8:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:0E:02:F3:14:85:10:7F:C7:32:5F:7F:58:18:6C:1D:9D:DA:EB
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:e1:dd:6c:fc:a0:95:77:5d:07:d4:92:21:7f:52:7b:19:
f7:6e:e0:aa:35:41:d4:c6:dd:b8:02:84:1d:f5:10:81:a8:c0:
c1:da:dc:ba:3f:b5:d3:a7:1e:41:ed:67:cb:e3:d9:d8:9b:df:
73:03:78:70:c0:84:bc:9f:38:fd:b6:97:46:02:f0:34:09:9b:
ed:09:fe:ec:7a:56:d1:fb:ff:ce:95:8c:c0:8c:5d:ef:16:62:
7c:6e:d8:45:74:64:24:46:57:89:65:5a:f8:0d:41:28:a6:81:
a7:49:cb:fe:a0:14:7d:8e:32:a9:6b:18:c3:5e:e4:64:ad:f8:
23:72:76:7a:61:24:ac:e4:a9:b2:3d:a0:16:de:88:8f:30:98:
a8:9b:29:79:c6:d4:58:99:39:00:1f:b9:09:42:ab:90:e8:3e:
0f:bd:57:b9:10:d2:e9:50:a3:37:a6:b9:ff:78:7f:ff:21:5b:
e0:f8:ac:91:35:9b:0c:5e:94:33:fe:8f:b0:78:15:19:18:69:
8a:13:2a:e5:e8:1e:9c:51:1e:a3:9d:f9:4e:70:db:81:d9:f9:
5a:40:fa:e9:41:ea:58:91:6e:97:9e:4d:18:f7:39:ae:be:d5:
7e:00:6a:83:1d:8d:49:65:0d:3f:0a:f8:14:53:4a:f7:e6:ee:
13:0b:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:49 2026 by rpki-client