Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: Nbobds+pkXngAVr+M+VNOuyMFEhkEd+6yO1zwIGekTk=
Subject key identifier: 98:7E:37:26:10:10:A3:98:9B:B0:F0:98:0F:FB:CB:05:41:35:F6:75
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 019E1E35E8D75943A44C323358E7460A2AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: EE
Signing time: Tue 12 May 2026 22:01:49 +0000
Manifest this update: Tue 12 May 2026 22:01:49 +0000
Manifest next update: Wed 13 May 2026 22:01:49 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: zqPwjDlnQOa3bVKnoQ8N6Lf9mUuXnFcpj7sranaMSzg=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:e8:d7:59:43:a4:4c:32:33:58:e7:46:0a:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: May 12 22:01:49 2026 GMT
Not After : May 13 22:01:49 2026 GMT
Subject: CN=987e37261010a3989bb0f0980ffbcb054135f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:67:0e:6c:26:d9:40:9f:24:4c:88:c9:0a:
99:2e:be:23:db:52:94:2c:03:0b:da:8c:e0:87:96:
71:95:d4:54:d9:b8:08:d5:09:82:c0:1f:6a:a1:00:
ef:f0:ae:4c:2a:05:07:a3:3e:1d:3a:62:ec:44:db:
a2:62:23:a4:59:5a:6b:63:43:b7:ab:a4:b3:f3:ee:
0b:59:fc:64:4d:5e:d0:86:7d:43:57:c5:fd:da:98:
7a:8a:2b:35:31:2f:92:46:29:e6:0e:5b:a5:12:18:
8d:96:44:fe:b4:69:34:4c:f0:8b:18:48:8f:9b:eb:
63:1a:37:44:90:f8:54:28:32:d2:80:a9:a4:d8:b2:
54:b2:d3:c1:37:04:63:54:f6:fd:d4:5b:3d:48:8c:
fa:2f:6d:0f:c9:3d:98:33:85:6b:fa:b4:d7:70:9e:
9f:62:c4:58:17:73:33:21:ec:8c:d7:da:27:c3:56:
00:16:52:26:31:df:86:57:52:9f:e1:47:72:92:fd:
fe:52:4e:2d:50:86:a9:ca:26:32:65:fb:dd:2f:2e:
b0:25:fa:49:1c:ef:66:76:49:fe:e0:af:27:69:db:
9c:cf:c2:13:e5:2b:82:de:f0:eb:0d:a4:89:23:62:
21:47:7e:54:6a:75:92:06:2b:a2:0c:60:14:72:86:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:37:26:10:10:A3:98:9B:B0:F0:98:0F:FB:CB:05:41:35:F6:75
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:32:8a:1e:8c:d7:49:40:2d:09:b5:0b:80:15:64:fe:7a:
90:d3:c5:8d:0f:d9:fe:4a:08:18:43:58:11:91:7f:da:03:3e:
c2:2e:40:0b:5e:44:13:7b:96:d4:fc:82:de:4c:92:0f:6b:f0:
21:11:43:38:22:89:a6:34:ab:63:1f:59:1a:6c:0d:a2:5a:d0:
c7:63:9a:96:98:99:72:0a:8a:d3:d6:f1:64:c3:86:0f:e7:c4:
9f:fa:bb:e1:d4:71:7b:ff:38:e7:27:e6:9c:c0:b9:9b:21:57:
d3:7b:c3:56:fa:6f:7e:d8:e2:09:04:b3:fb:a3:fb:6a:26:67:
75:5c:28:79:8b:fa:16:1b:22:e4:49:62:e9:38:c4:d5:42:1c:
0b:75:0f:f5:50:0b:ec:b8:f6:2a:86:8b:b5:48:da:08:d4:6b:
c7:9f:3f:3d:8a:d2:45:d0:fa:e4:06:09:a5:7a:d3:4b:e3:53:
4e:81:67:cb:95:12:5b:33:d4:70:56:8c:a0:6d:08:76:38:7e:
c0:72:f6:c3:fd:59:2f:26:63:0f:01:c8:9f:2b:81:f0:eb:27:
9e:e2:bf:68:62:00:c6:c9:60:bd:52:ac:fb:81:e5:1b:2a:a4:
db:c3:a3:17:20:8d:aa:fd:13:8c:ce:4a:70:f6:d4:dd:c5:d6:
f6:61:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:52 2026 by rpki-client