Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: KJlFdDswrnVodb+KREmbywh0W4SniV7J7Rdp6rGDgjU=
Subject key identifier: 4D:93:E7:7C:51:A9:6E:52:5D:9A:7B:D7:7D:4E:99:97:B7:1E:8E:9C
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019E1C1054BB136C26437A8B897C45672C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 12:01:32 +0000
Manifest this update: Tue 12 May 2026 12:01:32 +0000
Manifest next update: Wed 13 May 2026 12:01:32 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: M63Q7ID22UiTfkdbl4A0phXD95mBmAqSqtPNQnw2PSw=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:54:bb:13:6c:26:43:7a:8b:89:7c:45:67:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: May 12 12:01:32 2026 GMT
Not After : May 13 12:01:32 2026 GMT
Subject: CN=4d93e77c51a96e525d9a7bd77d4e9997b71e8e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:05:7d:5d:47:b2:bf:a1:63:c7:a8:dd:79:
99:f4:a6:03:de:ab:25:6f:de:c1:cf:0a:39:e3:e1:
d3:72:73:c8:83:2a:3c:f3:38:dc:91:c3:65:e9:ca:
b4:89:e1:6f:6c:20:d9:40:68:48:53:8e:d0:48:1c:
b1:5f:27:89:02:49:25:9b:4c:25:1e:bc:e6:fd:ae:
36:ce:98:36:52:90:b7:3f:d5:7b:fa:a8:58:ad:0f:
87:95:fc:92:16:6b:8a:d6:4c:02:fc:07:39:45:8f:
8f:e9:ab:de:19:13:fe:6c:5a:cc:6e:c2:69:ce:14:
27:a4:71:1a:40:fa:77:77:14:a1:1c:02:58:4b:76:
b9:2d:8a:2f:66:71:a9:80:3d:58:57:83:94:a4:3a:
7b:1a:83:0e:5c:2b:4e:8e:1a:fd:1c:34:32:bd:38:
43:f9:28:58:47:70:0a:9e:89:22:d9:bb:b5:ba:73:
44:d0:78:28:4b:72:fa:6b:19:46:44:3d:1e:cf:a2:
a4:12:89:fb:ce:de:08:98:9e:e4:38:98:62:28:e9:
fe:89:f6:a0:bb:b8:9a:10:79:e4:69:83:9c:1b:04:
60:be:cd:00:8c:65:40:6b:07:be:c7:52:a7:e2:9c:
90:d1:64:fc:bc:33:de:48:ca:c2:cb:b4:41:09:bc:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:E7:7C:51:A9:6E:52:5D:9A:7B:D7:7D:4E:99:97:B7:1E:8E:9C
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:ea:3d:98:ae:da:6b:c3:5d:5b:3c:03:ea:d7:0b:08:c5:
00:28:61:0f:69:70:5b:2b:c4:82:1e:6f:d9:fb:5d:e3:f4:cf:
9e:0a:f2:a0:58:a8:a3:09:1e:05:98:e1:39:96:82:6d:9e:5d:
ba:46:de:2c:58:91:65:3b:e2:85:3d:53:85:1d:e8:ce:fa:95:
5c:7b:ed:81:33:29:6a:2c:57:36:35:db:d4:7a:85:8e:bc:29:
1d:f2:74:96:50:dc:b2:7e:23:cf:10:fd:bf:e1:5a:d2:8d:12:
d6:d4:5e:f7:15:55:a9:78:69:49:41:ca:e0:86:f0:c6:2a:b8:
aa:70:6e:c6:70:e7:47:ae:5b:72:bb:cc:ab:e8:17:d5:76:8a:
03:2e:cc:54:94:c1:49:eb:97:a3:6e:54:e2:35:28:44:26:7a:
79:93:62:7a:53:28:98:a0:b8:31:98:b4:2c:e7:64:49:93:ae:
88:32:6d:f7:fc:ca:16:d6:d8:9a:65:73:0e:ed:3e:5c:32:4a:
48:b6:6e:54:56:b0:da:b3:22:26:ba:0e:8a:a9:16:f0:f3:45:
cf:28:80:1b:c4:21:6b:7c:29:0d:ed:65:f6:2d:4e:67:a0:60:
80:fc:0a:aa:08:48:2e:72:16:95:e1:23:6b:d1:08:08:bb:ff:
75:f5:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:22 2026 by rpki-client