Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: 0RVDZ8wrZzcKXPt1265duQ83kUJfB4swyCT9QXyswec=
Subject key identifier: 11:56:88:B2:DF:05:F2:05:0A:87:08:24:EB:5B:19:BE:FE:DE:DE:67
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019D99625D148B167A0C179FF13008AAE52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0FF2
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: MbK5SHezZ23xvMu9+zzpldOpWYicpxLbX990ZZR8kfM=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5d:14:8b:16:7a:0c:17:9f:f1:30:08:aa:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=115688b2df05f2050a870824eb5b19befedede67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:96:00:96:6b:60:a2:1d:af:bc:95:24:77:
c2:15:9f:d3:35:81:13:47:50:69:ac:92:ae:5b:3c:
25:c3:4e:a3:ab:f1:bd:6d:10:a6:56:3a:6f:31:f7:
6f:dd:9d:7e:66:d0:79:b6:c4:86:2c:97:70:8c:6d:
71:3b:1a:25:4b:32:c1:14:79:9c:ab:71:41:c2:1b:
4b:5b:a7:f3:72:14:18:30:25:fc:14:00:b6:7a:74:
fe:2f:ca:8a:de:72:cc:b2:bd:26:e7:09:fe:e3:b7:
25:b9:b8:b5:0c:5a:a6:c2:97:b5:c8:54:51:10:aa:
59:cb:24:c8:5c:d2:89:c4:3d:6b:7e:cd:20:13:c4:
ff:b1:3a:d0:a3:af:75:06:d5:a0:0b:68:06:85:c8:
c5:19:06:19:9d:a8:68:1b:c1:3b:c5:65:12:9e:98:
49:e0:c6:dc:94:d1:a7:dd:49:58:de:e2:2b:81:ee:
20:0c:18:5d:94:24:cf:6c:01:e3:37:0c:0f:4c:2e:
15:4c:91:ee:d5:a5:3d:1d:61:4f:f6:db:8c:7d:17:
6b:17:d7:06:7a:13:24:0a:66:71:e6:84:f2:3e:a2:
a5:c3:19:3c:ea:64:5f:54:70:18:16:41:56:9d:6c:
06:a5:20:1f:de:45:32:ff:62:a1:17:19:de:54:cc:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:88:B2:DF:05:F2:05:0A:87:08:24:EB:5B:19:BE:FE:DE:DE:67
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fd:83:f7:01:08:b4:04:10:69:cc:55:bb:3a:9d:be:6a:a9:
72:d8:2d:ba:ac:13:fc:81:f3:a3:97:af:1d:28:13:c4:82:1e:
d9:b0:3a:46:6e:0f:8d:ab:38:d9:d3:4b:96:5a:0a:75:5f:8d:
7e:93:3a:6d:04:c5:91:51:97:19:a9:ad:70:d1:31:8b:8c:dc:
c4:76:07:b3:8f:7a:9f:2d:93:73:57:bc:43:e3:1a:80:29:04:
3b:ac:88:3b:be:95:c8:d9:92:ff:f0:ee:5c:4a:46:bd:88:bb:
fe:bd:c9:4f:e8:67:db:cf:d0:6a:a2:dd:e1:34:ea:da:40:a8:
64:f8:6a:cc:a2:e2:2e:64:97:b8:ed:c4:74:98:a7:e4:4e:5a:
1a:8c:0f:a1:9b:4b:be:7c:35:4a:d9:e1:62:1d:f7:63:65:c0:
fb:a4:1e:97:b7:a8:32:fc:88:f0:c8:88:51:13:9a:ca:b9:82:
c2:9d:80:10:bc:4d:bc:54:4e:b7:c0:73:ed:0a:0e:fe:4a:cc:
46:31:bb:fd:30:2b:14:ed:24:46:c2:e8:6d:37:b5:8b:3e:a9:
5d:c1:c7:59:ac:40:08:5a:e9:52:64:f1:13:04:a5:4e:35:b0:
78:f1:fb:83:e6:fd:a1:cf:88:6a:ed:48:24:6d:0b:d0:6b:87:
77:45:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:43 2026 by rpki-client