Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: sxMmHmJ815S9hTZY6TO9Gd8UrKp0dVHEA7qPJr/JbTc=
Subject key identifier: E9:B7:B3:E5:8F:88:94:C8:A6:AA:B6:1E:84:BC:F3:42:EC:75:B2:AB
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019E1C101BCF0BBF7DB56CE0A9A64A0E6855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0A14
Signing time: Tue 12 May 2026 12:01:18 +0000
Manifest this update: Tue 12 May 2026 12:01:18 +0000
Manifest next update: Wed 13 May 2026 12:01:18 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: xcgcKNl2cvmnxLalxU3Vh3qU5eCZXBuhfynRBmAEQgY=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:1b:cf:0b:bf:7d:b5:6c:e0:a9:a6:4a:0e:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: May 12 12:01:18 2026 GMT
Not After : May 13 12:01:18 2026 GMT
Subject: CN=e9b7b3e58f8894c8a6aab61e84bcf342ec75b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:a2:3e:4f:b4:1f:6a:bb:fd:2d:c5:68:67:
52:00:c8:5e:87:ad:90:42:d2:bb:08:b7:b3:c8:57:
0b:85:f0:e8:65:6a:a8:27:f5:f7:a1:60:94:b6:ac:
6a:2d:3c:89:04:b1:df:c8:30:43:30:bd:ec:90:f4:
41:21:5c:35:b0:74:8a:24:27:91:e6:ee:56:c6:9c:
dd:95:6b:99:aa:ca:1f:64:36:10:d1:08:66:8c:70:
d6:20:04:90:4a:e8:4d:a6:88:45:7d:8c:51:34:08:
bf:70:1a:70:14:c8:32:bb:3b:23:09:5e:3f:6a:e2:
a8:2c:e2:ab:d2:dd:21:26:03:16:29:e4:64:fd:d5:
c0:f9:68:69:64:9d:8d:40:4b:8c:16:69:5f:c3:20:
22:2e:ac:84:c1:14:1f:d8:92:4b:ea:eb:e3:b8:b4:
bd:3f:23:e0:c1:28:4c:24:39:db:d8:2a:8f:50:d8:
c7:ea:2f:81:41:cf:3d:42:1f:58:0e:0b:ee:e1:5f:
e6:6d:22:4d:0d:e7:e1:65:3f:9f:a8:f5:e8:df:32:
07:ee:ff:95:fe:71:97:03:e7:fb:b4:80:89:bc:09:
95:be:3b:c1:a4:01:c0:f6:fa:f9:20:ba:33:bf:5d:
66:ab:2e:1b:0e:79:ff:dd:97:0a:f2:65:f3:c5:4d:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:B3:E5:8F:88:94:C8:A6:AA:B6:1E:84:BC:F3:42:EC:75:B2:AB
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b3:07:02:22:62:fe:8f:8e:6e:fd:62:73:51:c2:f0:e8:3c:
ab:7e:6d:df:d1:22:f9:41:7b:da:b5:f0:e1:43:fb:1f:25:90:
a2:cd:b4:4c:49:c8:88:01:79:06:77:67:5e:43:82:1f:1f:dd:
78:dc:b3:61:50:bd:80:43:dc:1f:83:6d:2f:7c:3e:3b:10:07:
df:27:33:15:f1:87:ab:37:9f:8c:3a:ef:d3:62:9c:65:c1:ca:
df:dd:55:44:b0:04:43:50:23:ac:ed:77:fe:04:8e:e4:88:60:
07:c1:68:8e:cc:3b:cf:ee:20:de:1b:ec:13:83:25:1e:6f:1f:
11:92:ef:6f:8c:ae:7d:15:50:a9:d9:2d:ee:2b:13:b4:31:c5:
7a:47:d5:af:80:44:1a:18:88:69:20:af:0d:bc:21:5d:a4:74:
e2:b5:b1:fa:a2:50:da:eb:d2:54:81:a6:1a:63:99:2e:9c:b4:
48:af:cf:d7:c6:cd:f9:5b:1a:09:e6:04:e4:a6:be:ed:b4:3f:
13:3e:8b:29:7d:97:53:fe:6c:8f:9e:da:33:4b:a4:5b:e0:31:
b1:64:22:d9:e1:54:33:b2:de:c2:52:e7:7b:7b:bb:04:e6:49:
53:53:24:df:d0:80:80:d4:94:2b:a4:ac:2e:45:21:b5:1e:b5:
14:65:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client