Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: Fp31owsV21hbeTya02C/AyOgUe0a0FmBb94P4tOHv48=
Subject key identifier: 10:2B:97:20:35:7B:E4:0D:91:41:1A:58:59:DA:7B:70:5B:C9:3D:C4
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019E1DC79CA471CE5959717DA490EE34664F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0F7E
Signing time: Tue 12 May 2026 20:01:21 +0000
Manifest this update: Tue 12 May 2026 20:01:21 +0000
Manifest next update: Wed 13 May 2026 20:01:21 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: v8viyPl0onFDD/1/vQCJ9cZJPVRIaFCspNPVFw+L2eA=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:9c:a4:71:ce:59:59:71:7d:a4:90:ee:34:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: May 12 20:01:21 2026 GMT
Not After : May 13 20:01:21 2026 GMT
Subject: CN=102b9720357be40d91411a5859da7b705bc93dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:0c:96:1f:0c:33:b4:1c:45:77:00:9a:57:
63:31:e9:f6:b8:fe:16:09:53:d4:2e:5c:0f:30:5d:
52:4c:f8:97:1f:6c:b6:b5:25:9f:42:f5:e0:6c:04:
e6:5a:ae:3c:b6:7b:9f:41:45:2d:5d:a1:f8:ce:cb:
35:d5:5c:e2:35:6e:27:07:ed:60:a5:59:c2:a1:ba:
7c:72:35:ad:d9:f6:7d:fe:b2:6d:5a:b6:7b:a1:4a:
f4:01:3a:ad:3e:2b:ba:e0:9c:57:a9:90:00:b9:b0:
15:9f:1b:bc:e4:c7:c9:dc:5e:15:fe:58:fa:4e:e6:
4a:78:15:d9:c3:0b:e8:48:ff:d2:81:ea:44:28:30:
f0:29:8b:2b:ff:09:4d:be:64:82:5f:a3:de:03:90:
bf:14:6f:2c:6c:59:6e:a9:68:a1:39:c8:81:8d:bb:
19:a3:2d:80:a5:fb:6b:60:fd:db:0f:e3:5d:83:3c:
ba:d1:a0:96:90:de:71:cd:1b:c7:6b:72:07:8f:0b:
7a:84:3a:68:76:ac:e2:fb:27:50:d2:5f:25:6a:c3:
d0:ab:a1:4d:ce:55:ea:db:cf:e7:d2:33:ab:a3:36:
64:4e:d4:0f:99:b8:a8:fb:31:1e:50:86:6b:29:6f:
7c:6f:51:3f:01:e5:7e:84:4a:cf:df:74:18:72:b0:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:97:20:35:7B:E4:0D:91:41:1A:58:59:DA:7B:70:5B:C9:3D:C4
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:6d:ad:ae:e5:ff:9f:34:de:38:07:f1:1f:eb:41:06:43:
80:32:0e:f0:1d:c2:c8:fe:02:27:03:05:f2:05:c7:a2:db:e1:
84:d8:00:2f:15:f1:e4:99:d4:0b:7b:4e:2c:7d:7d:d7:c4:7e:
e6:72:ea:54:76:11:29:f2:a6:0a:05:c5:c1:96:12:4b:88:0b:
9a:7d:e5:8c:3b:a8:a2:d2:e1:ca:71:40:52:69:9d:79:08:de:
87:84:89:6b:21:78:49:0b:82:77:f3:91:88:98:39:95:ef:60:
51:31:a6:5a:f2:42:1e:44:72:76:cf:a4:a8:c2:5e:04:53:bd:
c5:c3:d6:f2:ca:07:ff:a8:57:f2:17:3a:37:6b:2f:ea:c7:75:
60:e4:bf:55:c7:6c:f5:d2:d5:a0:a7:8e:6c:9b:86:7a:df:65:
45:95:54:80:ad:14:34:46:41:ad:6e:fd:68:82:c0:a1:cc:e8:
d1:a3:04:19:80:4d:1c:8a:7e:ff:0f:ba:0e:bf:44:c2:66:d1:
83:47:b6:59:05:6f:de:6b:f5:99:b9:b1:40:8c:38:10:5a:fa:
d7:b3:66:0d:85:c5:6d:b6:5f:a8:36:98:17:b0:1a:47:8c:2a:
a0:bc:91:d3:a6:48:87:39:10:5b:fb:a0:99:30:57:7f:84:47:
33:01:e5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx5ykcc5ZWXF9pJDuNGZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx
NGVmZjIwHhcNMjYwNTEyMjAwMTIxWhcNMjYwNTEzMjAwMTIxWjAzMTEwLwYDVQQD
EygxMDJiOTcyMDM1N2JlNDBkOTE0MTFhNTg1OWRhN2I3MDViYzkzZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKcMlh8MM7QcRXcAmldjMen2uP4W
CVPULlwPMF1STPiXH2y2tSWfQvXgbATmWq48tnufQUUtXaH4zss11VziNW4nB+1g
pVnCobp8cjWt2fZ9/rJtWrZ7oUr0ATqtPiu64JxXqZAAubAVnxu85MfJ3F4V/lj6
TuZKeBXZwwvoSP/SgepEKDDwKYsr/wlNvmSCX6PeA5C/FG8sbFluqWihOciBjbsZ
oy2ApftrYP3bD+Ndgzy60aCWkN5xzRvHa3IHjwt6hDpodqzi+ydQ0l8lasPQq6FN
zlXq28/n0jOrozZkTtQPmbio+zEeUIZrKW98b1E/AeV+hErP33QYcrDFiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBArlyA1e+QNkUEaWFnae3BbyT3EMB8GA1UdIwQY
MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt
NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz
LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuptra7l
/5803jgH8R/rQQZDgDIO8B3CyP4CJwMF8gXHotvhhNgALxXx5JnUC3tOLH1918R+
5nLqVHYRKfKmCgXFwZYSS4gLmn3ljDuootLhynFAUmmdeQjeh4SJayF4SQuCd/OR
iJg5le9gUTGmWvJCHkRyds+kqMJeBFO9xcPW8soH/6hX8hc6N2sv6sd1YOS/Vcds
9dLVoKeObJuGet9lRZVUgK0UNEZBrW79aILAoczo0aMEGYBNHIp+/w+6Dr9EwmbR
g0e2WQVv3mv1mbmxQIw4EFr617NmDYXFbbZfqDaYF7AaR4wqoLyR06ZIhzkQW/ug
mTBXf4RHMwHlmw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:47 2026 by rpki-client