Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: tnkxIzxcTGNJfqtY7dSU9uF9/b7VL9Aub4KDJ+KlKMw=
Subject key identifier: 5C:20:28:10:E0:22:84:4E:7A:1A:7B:09:E5:5A:E6:D7:46:86:83:3F
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 019E1D90F2138FE022E2AAAF53E4418F73AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: B5
Signing time: Tue 12 May 2026 19:01:38 +0000
Manifest this update: Tue 12 May 2026 19:01:38 +0000
Manifest next update: Wed 13 May 2026 19:01:38 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: wmJtoGQwUyfIKLPpkg9Uw195UypFPKRJyaT9wtJF9Dc=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f2:13:8f:e0:22:e2:aa:af:53:e4:41:8f:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: May 12 19:01:38 2026 GMT
Not After : May 13 19:01:38 2026 GMT
Subject: CN=5c202810e022844e7a1a7b09e55ae6d74686833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:9b:6a:70:70:b0:45:dd:e7:15:23:7b:e4:
e0:31:2e:a4:34:bc:bf:6f:7c:cb:eb:e7:9f:7f:01:
50:fe:90:5e:b0:47:38:04:19:a7:70:d0:ad:23:38:
73:14:46:b5:b5:98:3e:58:e6:53:da:4b:06:82:58:
90:fd:68:b0:40:dd:5b:13:b3:d8:39:ef:27:a2:ff:
5b:7b:a1:a3:21:0a:be:1d:fe:54:79:f5:4f:83:1e:
3f:4a:40:c7:46:4f:7d:cd:ab:e8:d7:26:0f:01:c0:
8b:37:35:1b:90:fb:b8:d6:61:ce:b4:64:f3:12:0a:
75:30:2d:6e:70:59:f3:d3:b1:46:ea:0b:f9:36:80:
75:fd:5a:56:50:58:38:ff:b9:95:7e:3f:bb:e2:04:
41:b3:f1:f6:ff:77:23:83:96:93:83:96:d7:13:3c:
4a:2a:5f:e4:37:4c:a2:3a:8d:8d:a9:ca:40:e1:bf:
39:ef:57:a6:89:bf:23:b6:79:b7:10:dd:e1:59:47:
a9:08:e9:40:5f:76:3c:26:75:34:25:ed:8b:12:33:
b5:15:ba:ce:05:ca:14:f6:b8:f1:84:f6:77:01:f9:
6b:41:cd:98:e2:b0:f1:1a:3d:cc:d2:36:4d:39:0a:
7f:f1:0b:59:1c:b9:62:20:93:4f:0d:c5:9a:aa:5e:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:28:10:E0:22:84:4E:7A:1A:7B:09:E5:5A:E6:D7:46:86:83:3F
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b9:a5:4e:07:1a:50:2c:0d:cf:eb:2b:20:34:c8:d5:5b:d2:
67:eb:68:a2:3c:e8:6a:e3:cd:67:ba:10:d0:91:c3:3e:f1:ff:
f0:94:1a:80:40:7a:1f:62:a5:fa:45:b3:ab:16:76:e7:9c:af:
f2:97:2c:48:43:6c:ca:37:20:45:83:80:62:2b:f0:9e:ed:35:
0f:4e:f4:32:3f:00:f5:1b:4f:e8:db:d4:49:0b:5e:86:17:2c:
a8:aa:a7:24:79:c6:98:37:c6:52:7f:2c:f3:93:b3:ff:95:3b:
91:39:d3:3d:f3:0c:19:bf:13:fb:d4:82:33:47:89:c8:5d:7e:
32:2f:2f:4a:ef:5c:b3:0a:29:b3:19:ee:41:60:a0:bc:f3:68:
88:99:d7:28:88:b6:28:cf:40:a0:fc:c0:fb:20:6d:d9:01:f5:
f0:d6:ab:e8:c3:84:6f:b9:96:88:10:5c:11:52:a5:12:8e:2d:
13:32:9f:fe:8d:fb:65:93:d8:93:3a:a8:13:77:36:35:e3:ec:
4a:40:63:b2:1d:6e:60:08:b8:11:7c:43:bb:e4:9e:2f:7c:59:
e4:a1:40:5b:50:54:3c:b0:fd:01:20:48:b8:94:e8:e0:a6:e7:
7d:2d:2a:75:dc:7c:36:e1:f1:d5:b8:bf:cd:09:ab:3d:01:2b:
97:cd:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:29 2026 by rpki-client