Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: GVXCabTMHb0k36WUxnR4ZKczyyn6uK/GNN9rvhKZufo=
Subject key identifier: 31:96:11:79:22:C2:03:BC:84:47:7C:D9:D7:7F:5C:5A:3B:B2:F4:35
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019DA2D379406DB16BAFC23DEFC8641D8113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0C44
Signing time: Sat 18 Apr 2026 23:01:01 +0000
Manifest this update: Sat 18 Apr 2026 23:01:01 +0000
Manifest next update: Sun 19 Apr 2026 23:01:01 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: GVmZUUgbqH87ql5r3MBNQ+XX+Y01AK9wOGE9VonzGYs=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:79:40:6d:b1:6b:af:c2:3d:ef:c8:64:1d:81:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Apr 18 23:01:01 2026 GMT
Not After : Apr 19 23:01:01 2026 GMT
Subject: CN=3196117922c203bc84477cd9d77f5c5a3bb2f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:bb:23:05:ac:ee:f1:cd:d4:49:03:28:4b:
c2:af:fa:ff:de:1f:06:90:8a:15:c3:99:e3:ee:0e:
3c:94:25:20:27:67:ba:ec:11:03:6d:b8:5d:0b:a7:
da:b6:b4:11:85:4f:e0:7c:3d:cf:a4:53:6a:ef:0a:
ef:45:97:30:ee:90:4a:19:c7:cb:24:db:3f:7a:4e:
92:db:63:75:09:82:99:40:3a:5c:e1:b1:78:f1:47:
2c:86:63:79:af:b2:f1:84:58:6e:21:0f:52:ed:54:
da:9f:32:cd:1f:51:2b:03:ab:7d:9d:23:f6:4d:b3:
f8:5f:c2:fc:d3:c8:05:68:58:3e:04:c5:1f:c5:e4:
7c:bc:08:6f:e1:b7:cb:41:c9:29:a7:d0:85:84:6a:
ff:f0:d0:af:5e:36:7e:90:1c:76:b9:04:76:15:d3:
10:e7:15:de:96:df:61:ac:63:0b:c0:41:31:fd:6e:
7f:4b:cc:be:55:ea:a2:2f:9d:ee:40:1e:d6:6c:d9:
70:4f:b7:bc:93:6c:a0:eb:93:6f:07:77:cb:d6:85:
a1:b1:a7:ef:e2:2d:77:f3:11:bf:42:b7:df:c4:9e:
e5:a3:3f:b3:c2:00:1f:aa:99:2b:04:9d:1d:41:38:
77:6b:ee:19:5f:53:bb:d7:1c:52:b3:b7:a2:df:a5:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:11:79:22:C2:03:BC:84:47:7C:D9:D7:7F:5C:5A:3B:B2:F4:35
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:95:67:f7:02:f5:07:02:3c:c5:f0:7d:48:f2:d2:43:35:
20:70:d7:50:9d:cb:dd:16:63:b9:76:3a:67:82:b7:9c:19:73:
8b:c0:85:86:b7:fe:65:75:bb:e7:64:8f:a3:05:76:bb:b6:c7:
eb:85:8b:b7:0f:96:e6:b2:08:d5:25:5a:6c:20:7c:e3:9d:ea:
9d:af:70:ce:94:46:d3:39:5a:91:3d:5c:6c:5b:b8:c3:89:ed:
14:f9:c9:16:70:b9:55:65:57:93:a3:6c:64:eb:1d:c4:40:f8:
a0:a6:bf:e2:89:b2:8d:57:54:60:a0:0a:b3:d6:42:31:d4:e1:
03:67:d5:7a:cb:6d:0d:26:74:ff:de:65:1f:96:c1:0b:fa:56:
cc:e6:a6:d5:94:a8:66:9f:0e:49:ad:49:5c:fc:3d:ad:61:e0:
f3:74:63:5a:32:58:44:ff:73:82:e7:18:05:5c:aa:2a:fa:69:
98:8b:b4:ea:f1:11:6d:80:de:ec:68:35:26:8d:d1:c4:84:fb:
96:cd:51:09:dc:4f:a6:13:31:fd:b4:72:bb:32:0a:a7:55:76:
ac:25:d5:1f:b4:17:7d:e5:0d:2f:db:35:8b:5f:6f:69:86:31:
8a:89:c3:be:71:16:d2:4e:c7:66:3c:4b:54:67:2d:57:f6:a5:
dc:b5:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:27 2026 by rpki-client