Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: xBy0kAui3GVEt1R5aljbhhKrchij0zipLEIdcj3XuKg=
Subject key identifier: 77:79:21:CF:50:A3:25:A5:5C:62:38:CA:BD:69:F0:CD:E9:2A:05:BF
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 019D992B200BE94D0F972D1480611C9D3660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0FF8
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: NrT+c/ONhg3cESsGfww8vA52pPffvC/7aUskkrtmaL4=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:20:0b:e9:4d:0f:97:2d:14:80:61:1c:9d:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=777921cf50a325a55c6238cabd69f0cde92a05bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:5e:18:6f:c5:a0:66:fd:01:c4:3f:05:f9:
29:21:19:1e:75:e0:f3:f7:26:ca:4a:b1:64:9d:ae:
0a:0f:02:be:f6:dd:37:0c:68:16:8a:51:8c:75:2b:
71:80:8c:b0:65:07:cc:3a:00:df:3a:83:d2:24:98:
17:60:26:ff:02:a5:23:1b:82:9a:f5:6a:6d:9e:e7:
db:32:ed:e8:7f:79:f7:6b:2b:8b:8a:7a:13:8b:cf:
46:7a:b9:08:d9:2c:aa:0f:1e:91:37:21:ee:d1:2e:
ee:d4:89:aa:43:b1:73:19:6f:6e:1e:ae:25:15:ed:
d9:d3:5c:64:86:cd:38:84:bc:59:54:c2:f5:03:18:
b1:a0:e5:8e:48:07:a5:6b:28:ca:90:dd:92:a9:0b:
fd:40:b5:e7:36:fa:b8:12:5b:89:9e:9f:d1:25:8f:
6d:da:38:89:ad:0c:b7:f7:7a:33:b5:27:dc:ee:20:
7c:25:fe:53:e9:65:bc:e0:f8:c8:ce:35:a2:be:b5:
80:11:17:2f:89:00:9d:9f:f0:93:a4:79:4d:80:b4:
b0:97:68:7d:9e:6c:b3:b1:a3:f4:d5:35:71:db:c0:
ab:67:7f:9b:ba:ac:a3:43:61:03:05:0b:3d:df:fc:
69:68:e3:90:40:14:fd:5f:80:27:05:77:b6:ab:a4:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:21:CF:50:A3:25:A5:5C:62:38:CA:BD:69:F0:CD:E9:2A:05:BF
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ed:b0:66:a4:2c:95:98:72:c6:60:e3:78:84:ea:8f:bb:4d:
c6:1e:60:34:1c:cc:a9:3f:f9:eb:32:05:d6:9f:52:1a:0a:4a:
8d:2b:08:2e:c7:dd:37:ce:7b:94:09:84:17:c1:fb:a5:bd:11:
af:38:25:71:83:d5:37:06:94:b0:0a:10:ea:eb:ae:53:e6:0f:
cf:a2:05:66:7d:de:bc:9e:b0:c7:7e:f6:3a:93:d4:8c:1d:87:
f9:9e:71:f6:42:f8:a7:82:98:5d:c0:4e:8c:c5:c7:3a:e1:71:
6b:74:99:2d:1c:1e:a6:a9:8f:24:27:9b:f1:9c:00:b1:92:58:
6e:80:24:d2:3a:c4:ea:c5:5d:52:24:4b:ec:23:4b:2e:e5:11:
7b:c0:71:ed:a3:ee:42:8e:66:bb:82:bf:77:f2:a5:30:f6:04:
ca:56:39:2e:d6:62:62:80:6e:2f:d6:7f:c8:05:54:4f:41:1b:
88:98:c3:e4:9b:4d:b3:33:d9:9c:7e:e4:bc:92:ab:8e:79:14:
77:b0:e6:3b:e7:8b:02:62:5b:b8:c8:c7:23:cb:29:56:8e:e2:
21:19:2e:64:78:ab:b0:0b:99:87:d2:8e:03:7d:d6:51:b8:89:
b6:2a:d2:d0:26:e8:cf:35:6e:eb:af:53:13:3e:2e:87:4a:c9:
cc:51:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:21 2026 by rpki-client