Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: jtiuJV7V8Vgx9Rj9E5XK5lUhf2qNtxfQkqimGos6aug=
Subject key identifier: 26:B7:FB:C1:14:5B:44:8D:36:41:44:A7:EE:D0:BC:85:2B:B5:E8:80
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019E1D5963EB0264125670574044573D4591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 18:00:57 +0000
Manifest this update: Tue 12 May 2026 18:00:57 +0000
Manifest next update: Wed 13 May 2026 18:00:57 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: tQnWhyqh2Be7Vdzo3NP9WQcy4kMLTLOHA8ltaalbtJE=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:63:eb:02:64:12:56:70:57:40:44:57:3d:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: May 12 18:00:57 2026 GMT
Not After : May 13 18:00:57 2026 GMT
Subject: CN=26b7fbc1145b448d364144a7eed0bc852bb5e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:79:8f:c1:c8:99:47:22:8c:ea:bd:7f:ca:
48:ec:12:8d:86:40:b7:dc:e0:2e:7d:f6:88:c9:98:
55:52:4e:6a:d3:4e:86:d6:1c:ba:2a:04:2c:8f:5f:
11:a0:27:67:c8:5a:5c:9c:5c:38:05:62:ea:f1:76:
18:fd:59:fe:98:06:af:70:f9:75:9b:0d:17:2f:07:
b7:dc:36:9b:79:c3:00:cd:d4:20:5d:18:78:32:80:
3f:42:86:0b:78:7a:eb:b3:7c:d5:9d:f3:9d:13:f1:
d8:8f:87:70:b7:a9:d2:ba:be:8f:b1:21:65:87:a7:
17:a4:c6:34:75:52:42:61:b6:e3:22:41:9b:a8:38:
f4:48:10:9b:84:28:85:28:26:8e:14:be:9f:67:0d:
e1:48:ea:43:98:b5:bf:45:0b:03:72:cf:4b:30:a5:
3a:98:3a:3c:b6:4c:b7:37:b4:e6:0a:ad:da:ac:c3:
2c:88:7d:aa:cb:ab:95:53:b4:5a:93:ac:d7:53:e6:
3b:d5:2e:7d:1e:5f:ac:c9:b2:97:cf:63:94:b7:59:
37:71:76:5e:68:48:6a:32:22:ee:c2:2c:6a:d4:b5:
35:7c:23:bd:50:21:43:fc:29:ba:38:c4:14:87:80:
ce:df:fe:c9:b4:0b:39:49:6f:e6:d8:2c:09:67:c4:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:FB:C1:14:5B:44:8D:36:41:44:A7:EE:D0:BC:85:2B:B5:E8:80
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:b9:e6:a7:89:c6:d5:7e:28:17:a2:25:ef:76:7e:bd:7c:
94:e9:3b:c6:ba:60:bb:f8:1f:8b:c8:76:93:d1:25:00:17:03:
94:c7:b2:5f:ca:0d:cf:fd:49:26:20:1e:00:34:db:50:28:04:
86:c3:a9:fd:a1:a7:44:36:ff:2e:ac:12:83:38:1e:36:db:58:
2a:ca:78:d0:e5:4a:c2:ec:40:55:f9:f5:59:76:ea:04:16:97:
50:04:cc:8e:1c:94:d8:31:fb:e5:a2:c7:7e:92:63:7e:b7:98:
08:29:6d:20:54:39:ef:6d:29:40:8f:41:39:5d:2c:f4:07:7c:
5a:6f:24:ea:e2:8d:52:0e:40:23:06:1a:25:76:42:8d:bd:9f:
c3:45:a8:62:61:be:c3:67:8e:76:1e:2b:7c:50:48:97:e9:ac:
95:61:6a:f0:fe:ba:ae:2e:b2:ad:06:d7:20:13:8b:96:51:20:
91:e7:36:f6:47:51:be:68:af:6c:2a:9d:3d:dd:f3:74:6d:df:
c8:79:d2:52:3d:a6:92:37:ef:be:00:2c:92:1f:84:75:be:a1:
51:af:2f:87:0c:e3:51:4c:c0:73:7f:45:c2:24:84:9d:c1:80:
93:30:a6:76:f3:25:d8:61:84:50:11:f6:fc:d5:04:f5:db:8c:
97:f0:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:00 2026 by rpki-client