Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: YL9sEkb0TwaF4eE52j5hhlxzbFd+RCd9vXrz9NyjCwI=
Subject key identifier: 7A:28:40:F4:D0:29:FD:9A:24:B1:E4:95:CB:8A:DD:8E:C2:C1:38:41
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019E1D90FF1F01C9AF9319CB3432DBEA38E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0B2F
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: oM6Bhri3UoxIODQwxG5NIjzWf2y+XAPz4vzh1OdDkPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ff:1f:01:c9:af:93:19:cb:34:32:db:ea:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=7a2840f4d029fd9a24b1e495cb8add8ec2c13841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:6b:af:5d:31:49:e8:2e:e1:93:5c:8d:31:
21:de:c2:21:fd:ed:f2:d8:a4:8b:74:74:5e:96:29:
d7:32:32:31:f4:61:3a:a7:75:26:0f:2e:43:a8:f9:
c6:84:ea:3b:7b:73:16:29:0b:77:36:e1:ef:10:3b:
88:52:ca:49:50:3c:4c:dc:01:87:12:59:8b:2a:ce:
86:3e:e5:4c:c4:e7:d7:8b:68:8f:8d:d4:e2:99:12:
2d:73:2f:ad:b9:47:01:d4:8a:88:94:6f:cb:00:59:
38:80:63:ce:22:98:6e:77:51:c9:1e:70:f0:af:80:
a6:dd:c8:b6:20:79:41:11:a1:48:c6:f8:2b:5c:31:
6b:99:25:a7:e1:60:d2:84:e4:3f:01:59:33:14:40:
e4:34:8f:56:4c:a4:15:21:28:e7:f5:b7:6b:6f:57:
79:48:d2:9b:00:ce:9a:de:1c:2f:55:49:9b:ac:3f:
91:fa:d9:19:82:a0:01:61:9e:8a:3b:1c:c6:14:1c:
3f:98:7c:57:34:be:25:e1:45:46:1e:f9:0b:3c:da:
76:e8:a8:c2:59:16:ac:0d:ab:89:e8:f4:f9:90:27:
89:4a:3c:70:18:39:3d:57:a3:5d:ba:1a:84:60:1b:
4c:ac:27:e2:c7:f4:77:c2:5e:9e:3b:2e:02:6d:af:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:40:F4:D0:29:FD:9A:24:B1:E4:95:CB:8A:DD:8E:C2:C1:38:41
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0c:dd:c2:12:6a:89:b6:ac:ce:87:f7:96:0c:ae:63:48:c6:
70:15:f2:21:e5:64:6f:e0:cc:d1:ad:1f:49:d0:36:54:2c:69:
d7:2d:5f:be:1a:37:e5:c1:08:86:c5:79:41:80:e7:d3:25:2b:
13:e6:ff:52:42:32:3b:21:8a:32:c3:0b:00:f4:cc:8c:85:59:
13:bc:52:32:05:47:38:0e:fa:ef:33:b7:02:b3:87:b4:c8:00:
b8:41:6f:a0:17:c3:4f:aa:cc:d1:cf:61:c2:38:74:8a:31:68:
0a:dc:f4:26:0d:d3:1f:e1:67:bf:31:a6:65:f3:fd:4b:93:23:
d8:bf:f9:b3:f9:e9:03:b1:8f:0a:00:3b:cd:28:5e:7b:f6:52:
5c:39:ce:3f:fb:10:04:be:14:8c:c3:06:63:fa:b6:44:1c:0a:
6e:09:aa:f8:eb:7c:8d:9d:92:a0:35:54:b9:88:2a:81:ef:d6:
1e:dc:4f:ea:fa:1c:aa:ca:56:3c:23:67:b8:e3:c6:91:a1:1c:
26:de:5f:7e:86:74:39:cd:cf:91:97:7d:00:d8:85:4e:c0:4d:
f1:86:87:4d:39:54:a1:ec:5b:f3:9d:94:c0:26:89:c3:64:46:
66:e4:d1:c1:ae:f0:da:79:1a:02:67:68:29:e4:75:ac:43:19:
d5:7b:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:35 2026 by rpki-client