Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: FIpp21ByUSc9i2WOUp090tAaQeH16WDlJBn4mffn5Dw=
Subject key identifier: 1A:42:BF:B7:2A:F9:6E:89:00:34:E8:41:F5:A6:02:50:0B:E0:77:68
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 019E1D230B67D25EA45583D1D9B2BCB035DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 17:01:36 +0000
Manifest this update: Tue 12 May 2026 17:01:36 +0000
Manifest next update: Wed 13 May 2026 17:01:36 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: K2PEuFMuS3qCGqbea9yy1qipw5vpM3fMlC2Tz3cOYXw=)
2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:0b:67:d2:5e:a4:55:83:d1:d9:b2:bc:b0:35:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: May 12 17:01:36 2026 GMT
Not After : May 13 17:01:36 2026 GMT
Subject: CN=1a42bfb72af96e890034e841f5a602500be07768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:90:df:22:21:c7:86:d6:bf:c2:99:9c:67:
9c:c7:64:db:18:4f:2c:93:95:5a:5d:3b:78:21:8d:
6d:38:61:69:de:d3:11:3d:83:48:d6:68:d0:1e:3e:
8e:23:b7:13:10:d1:ff:b2:53:b0:36:97:1a:75:06:
7c:cd:4e:31:d8:61:4d:e3:ce:01:57:c6:a4:2c:3e:
14:bd:bc:0f:4e:7f:6d:2b:6c:d4:ff:04:f1:80:a4:
c2:a9:57:a1:ef:0f:72:ab:e0:d2:27:c5:08:82:68:
98:b1:1e:12:24:cf:5a:6a:33:4f:c5:47:3d:8f:24:
74:8c:ff:07:6a:70:f1:36:0b:66:de:05:dc:37:ed:
96:ad:7e:3c:cd:72:1a:9a:a0:61:59:a2:c5:f7:af:
55:4e:3c:7e:37:17:52:4a:c9:6e:e9:d6:b7:53:fc:
e2:de:86:ca:0e:22:19:7c:68:4a:89:e8:84:4c:cc:
6a:a5:88:56:7f:60:87:06:c9:f8:d4:d4:12:3f:1c:
f4:93:7f:33:28:5b:2b:6b:bd:7b:4c:b1:8d:67:b5:
5b:a3:fd:13:9e:8a:f4:2b:a2:d2:58:c9:76:6b:f9:
d0:49:05:ef:37:11:40:ad:f5:68:1b:1f:58:d5:f9:
e8:a3:5f:6f:2c:c7:be:38:f6:6b:2f:d4:a5:f3:e1:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:BF:B7:2A:F9:6E:89:00:34:E8:41:F5:A6:02:50:0B:E0:77:68
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:b5:be:f8:09:df:b4:b2:c9:77:b9:95:d9:ee:26:4b:8a:
f7:d0:b0:37:33:33:04:8b:05:5c:24:38:b6:00:44:c2:7d:82:
9d:cf:28:db:02:f6:5a:5f:6b:63:af:22:9d:ea:aa:59:a5:38:
52:14:3f:84:8c:d8:d5:52:62:6a:85:cb:5c:49:ff:1b:18:6c:
d1:07:df:e0:55:5e:b9:14:db:75:61:08:a4:f6:ae:7d:f9:b8:
7b:57:e6:4c:b1:94:4a:fc:ce:5c:b7:9e:d3:28:4d:99:6e:26:
43:cb:96:2e:4d:5f:75:38:18:17:10:a8:ba:ca:d6:83:d8:86:
fd:81:a9:65:94:02:97:c1:c4:4b:72:28:cd:78:7e:fa:11:3f:
2e:e6:01:a9:d5:5e:2b:05:f0:6b:86:7b:e8:8c:99:1b:8c:11:
5d:ba:d5:ac:46:fa:d0:f2:55:e7:09:80:6b:16:8f:11:4e:3e:
59:8c:a1:27:5b:fb:9b:3b:ce:05:5d:ea:73:d1:67:8a:f5:b9:
67:5e:a0:a5:1d:2c:25:5b:ee:d3:b9:f4:8e:49:a0:0a:8f:3c:
54:e9:f1:ff:a5:4e:d7:7e:a9:dd:2b:32:ad:3e:6b:ff:a8:e0:
5b:cb:5f:32:49:bd:ae:93:2b:ff:d1:11:f7:da:d1:c3:f6:ff:
e5:7f:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:58 2026 by rpki-client