Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: K+EU6UyvWUz2ZyH8ecJupvJGzl3vY4XELTcF+LlpJDA=
Subject key identifier: D3:B1:72:CE:12:7A:94:5C:10:AE:0B:DC:21:AB:71:93:BB:19:F8:79
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019E1CB4672F0CE503A3564C93DDDBC5184C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 1041
Signing time: Tue 12 May 2026 15:00:45 +0000
Manifest this update: Tue 12 May 2026 15:00:45 +0000
Manifest next update: Wed 13 May 2026 15:00:45 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: KID5KwwBTgFLCj6sb9TKwwZdmAzippt/OdUvinplkZY=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:67:2f:0c:e5:03:a3:56:4c:93:dd:db:c5:18:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: May 12 15:00:45 2026 GMT
Not After : May 13 15:00:45 2026 GMT
Subject: CN=d3b172ce127a945c10ae0bdc21ab7193bb19f879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:39:5a:10:4b:6c:d4:23:89:59:db:ec:ff:
56:04:62:86:47:99:8c:7a:e8:4b:64:98:ec:0d:c6:
30:98:c1:50:d5:44:7f:ec:0f:34:a1:ba:30:f7:77:
9b:b1:59:45:9b:a6:36:7a:5e:ee:a8:ff:46:e0:7c:
ca:d3:76:e4:3c:45:8d:b5:13:2f:a0:92:a1:3e:16:
41:65:19:04:cc:65:2f:30:84:07:39:e1:55:69:4f:
db:40:01:fd:47:f7:00:d5:11:b0:30:2d:7a:2e:a0:
9f:a7:55:ad:2a:8e:e3:dc:93:7a:47:8d:e1:e8:f5:
8d:1c:08:0e:eb:9c:1d:54:22:b9:b3:96:6e:ec:64:
07:06:df:3b:64:5a:6a:01:96:f5:c0:3f:9a:ab:35:
67:9c:4d:70:58:95:7e:5f:aa:28:eb:cb:33:a3:59:
af:b5:0e:8f:2b:d7:95:ff:e1:db:f7:9f:5a:15:66:
d2:6c:03:07:ed:b6:84:54:25:59:23:ec:3c:b3:40:
6b:61:9f:79:e1:a8:91:c3:07:85:0e:6b:75:b9:e2:
55:e9:d1:f0:4e:db:53:03:40:ab:b5:96:a1:5c:9a:
3d:b7:26:bf:96:47:fd:89:66:00:79:9b:50:33:4c:
76:b8:57:97:0d:bf:0c:fc:a7:3c:22:02:00:83:02:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:72:CE:12:7A:94:5C:10:AE:0B:DC:21:AB:71:93:BB:19:F8:79
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:6c:4b:14:ef:cf:0f:4f:ee:85:d1:e9:d6:e5:70:7c:92:19:
8f:99:d0:71:64:a3:a7:bc:64:a9:e9:e7:e5:bd:16:66:c7:f9:
6f:af:1a:d0:92:50:45:4d:bb:50:38:6d:c5:d8:3b:43:a1:51:
5e:9b:b2:6a:a6:cd:75:17:db:31:0e:b2:f8:80:5f:41:fc:c9:
ee:98:06:4f:fb:38:a7:32:9d:e8:84:33:1d:ec:5b:4c:e0:63:
c6:88:c7:8e:5d:7a:8a:cc:f2:60:d2:04:c6:0e:4c:32:b9:3b:
b2:8f:95:47:c4:dc:c3:a7:2f:fd:19:7b:ac:f2:ee:cc:ad:14:
44:b4:df:0f:03:93:83:d9:90:38:96:43:8b:b9:8b:1c:8d:68:
ec:7e:49:77:4c:74:b1:c7:c6:82:09:90:8d:74:76:1c:b9:9c:
10:40:2e:8c:c3:ef:14:f0:5c:0d:0a:fa:97:ae:66:a0:41:be:
9a:71:aa:a3:4f:85:d0:ae:ef:1a:04:ca:40:72:36:91:f3:50:
27:af:2e:ac:17:06:1b:d7:41:66:0f:7b:cb:9b:76:52:d4:d2:
4d:c0:a9:7b:4f:22:cd:a9:04:48:95:98:f0:bc:f2:d4:ee:09:
88:ec:62:d2:17:97:1b:a7:cd:9a:3c:17:d8:28:d8:9a:28:d2:
21:b6:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:51 2026 by rpki-client