Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: 2zybaKmAIHhBsDr+4YSz1eaxm2bVM1nC15GJ5Ic7cKc=
Subject key identifier: F4:E0:5F:C4:EC:8D:E3:39:C9:09:79:BB:93:B6:09:95:52:8C:92:09
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 019D99624CC4C844827E4D18D5D8D8521328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0D37
Signing time: Fri 17 Apr 2026 03:00:49 +0000
Manifest this update: Fri 17 Apr 2026 03:00:49 +0000
Manifest next update: Sat 18 Apr 2026 03:00:49 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: CyaZVC7q0WhxCdHiCo93cBurR/uFKVPSBCD1Vqokaus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4c:c4:c8:44:82:7e:4d:18:d5:d8:d8:52:13:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Apr 17 03:00:49 2026 GMT
Not After : Apr 18 03:00:49 2026 GMT
Subject: CN=f4e05fc4ec8de339c90979bb93b60995528c9209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:66:01:f6:68:80:99:eb:c7:08:86:dc:b6:
07:7c:5e:da:d4:1e:5d:13:98:5e:ed:2a:14:fe:5a:
b3:21:0e:85:8b:ec:73:7b:8f:e5:0d:90:5d:b0:ba:
ed:e8:0e:5a:ae:e0:22:0c:15:36:27:2b:ce:5d:9f:
b9:cd:23:4b:c7:d1:db:9f:7c:75:0b:1b:65:c8:fc:
e3:66:ff:e8:2d:e7:94:15:1e:98:4b:90:f6:e5:54:
56:b0:b7:32:18:d3:1c:8a:6c:9c:4c:84:ad:d3:b9:
c5:27:ad:cd:e0:81:07:d8:13:b2:83:cf:7a:24:8b:
dd:99:34:6a:c3:5e:c7:d7:fb:80:12:6a:d6:22:e6:
f8:90:3d:3a:38:d9:6d:be:95:e1:f6:79:d5:5f:ed:
be:30:6d:85:33:2f:17:72:2a:29:a7:0f:a0:72:29:
0b:97:91:48:8f:eb:c3:af:5a:d8:7b:e0:b3:21:94:
e2:be:08:f6:80:a8:1e:93:14:9a:7a:e3:95:99:4c:
75:f8:99:0c:74:28:f3:6b:5b:c8:c6:3b:b9:47:3f:
31:5f:1a:a2:22:d8:3b:3a:6b:17:48:73:a4:8c:15:
84:cf:e9:a9:34:80:7d:5b:10:6d:f3:92:af:66:2a:
29:cc:14:14:03:5d:f0:c7:a5:1a:c8:50:35:fb:bf:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:5F:C4:EC:8D:E3:39:C9:09:79:BB:93:B6:09:95:52:8C:92:09
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:7b:25:c0:41:15:5e:f6:7c:a9:b8:f4:2e:04:84:76:2d:
b0:22:d5:2e:76:cc:28:36:87:9b:fa:d9:ff:fa:41:28:4b:2e:
9b:2f:3a:c7:fb:03:1d:da:e1:8b:28:f6:82:a6:03:48:cf:d6:
cb:fa:3d:7d:3a:d0:d8:be:a9:f5:37:17:32:a7:48:53:e3:98:
2b:9c:8f:35:b3:59:e8:7b:8a:0a:cf:e5:5f:d8:4b:57:20:be:
4c:45:db:56:fc:2c:d6:da:2e:c4:78:a5:38:bc:fc:b3:80:07:
9d:ce:c5:2a:0a:13:8e:f9:28:08:a7:72:6e:dc:ab:64:cf:20:
4a:79:e9:90:dd:4c:f1:46:41:77:87:70:70:a2:05:27:50:65:
4e:68:7d:83:0d:be:d1:96:f1:6c:f6:1f:ff:9a:ec:19:63:a8:
b4:40:7c:6c:63:e4:f2:dd:6b:24:83:47:6e:fd:4e:9a:97:2d:
79:36:3d:f4:0c:3c:e0:80:7a:06:26:90:c2:4b:99:1a:e0:8e:
56:9b:3b:f0:34:e7:ae:4a:21:c2:dd:e1:22:d0:e4:00:95:7e:
cf:1e:4e:41:78:3c:69:d5:dc:ec:67:24:5a:13:dc:be:46:b8:
26:d7:71:06:54:87:20:3a:83:54:5b:b5:d6:1c:f1:69:ad:7c:
ec:a7:be:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkzEyESCfk0Y1djYUhMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjYwNDE3MDMwMDQ5WhcNMjYwNDE4MDMwMDQ5WjAzMTEwLwYDVQQD
EyhmNGUwNWZjNGVjOGRlMzM5YzkwOTc5YmI5M2I2MDk5NTUyOGM5MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdmAfZogJnrxwiG3LYHfF7a1B5d
E5he7SoU/lqzIQ6Fi+xze4/lDZBdsLrt6A5aruAiDBU2JyvOXZ+5zSNLx9Hbn3x1
CxtlyPzjZv/oLeeUFR6YS5D25VRWsLcyGNMcimycTISt07nFJ63N4IEH2BOyg896
JIvdmTRqw17H1/uAEmrWIub4kD06ONltvpXh9nnVX+2+MG2FMy8Xcioppw+gcikL
l5FIj+vDr1rYe+CzIZTivgj2gKgekxSaeuOVmUx1+JkMdCjza1vIxju5Rz8xXxqi
Itg7OmsXSHOkjBWEz+mpNIB9WxBt85KvZiopzBQUA13wx6UayFA1+78m5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTgX8TsjeM5yQl5u5O2CZVSjJIJMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxp7JcBB
FV72fKm49C4EhHYtsCLVLnbMKDaHm/rZ//pBKEsumy86x/sDHdrhiyj2gqYDSM/W
y/o9fTrQ2L6p9TcXMqdIU+OYK5yPNbNZ6HuKCs/lX9hLVyC+TEXbVvws1touxHil
OLz8s4AHnc7FKgoTjvkoCKdybtyrZM8gSnnpkN1M8UZBd4dwcKIFJ1BlTmh9gw2+
0ZbxbPYf/5rsGWOotEB8bGPk8t1rJINHbv1OmpcteTY99Aw84IB6BiaQwkuZGuCO
Vps78DTnrkohwt3hItDkAJV+zx5OQXg8adXc7GckWhPcvka4JtdxBlSHIDqDVFu1
1hzxaa187Ke+4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:14 2026 by rpki-client