Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: Hy5j/BZgumo5q8JutV2vHave1LansPbDiYSRXmbKJgw=
Subject key identifier: 8D:FB:A7:13:F2:8D:44:A9:0D:D6:B4:57:50:11:63:C5:BC:55:7E:F9
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019E1F11849B46B8AB151095B5703C2B7CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0F07
Signing time: Wed 13 May 2026 02:01:42 +0000
Manifest this update: Wed 13 May 2026 02:01:42 +0000
Manifest next update: Thu 14 May 2026 02:01:42 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: yhCk8njMpLjXt4UNCfYgj046V7wZpV5d49xis5mUwb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:84:9b:46:b8:ab:15:10:95:b5:70:3c:2b:7c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: May 13 02:01:42 2026 GMT
Not After : May 14 02:01:42 2026 GMT
Subject: CN=8dfba713f28d44a90dd6b457501163c5bc557ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:e4:de:f4:00:9e:e1:de:18:a4:ec:a1:54:
dd:27:b9:30:5c:1a:7b:de:42:e8:03:f1:6d:cd:02:
f4:df:f0:a4:c0:1f:7e:54:3f:24:7e:90:88:45:bf:
4b:6a:05:23:ee:ae:bd:69:0e:4f:00:38:58:ad:2d:
5f:7f:7a:aa:40:29:9d:5c:a9:6a:7c:31:af:06:7a:
1c:fe:6e:1f:14:c8:ac:38:a7:cc:90:ea:67:4e:12:
5c:25:41:98:b4:5e:dd:ba:a6:d7:df:05:68:e2:e7:
9f:dd:95:dc:d5:e2:ad:12:f0:5c:4b:76:26:39:bb:
bf:3d:37:40:db:ec:0d:f3:34:36:db:5f:95:15:83:
a8:0a:38:24:09:71:99:c1:5a:41:5a:fb:09:9d:3e:
20:38:23:f5:f7:9e:9f:52:b8:4c:b5:10:3b:ee:de:
71:97:68:b2:ca:7b:be:32:cc:35:aa:5d:41:64:38:
2e:a8:c3:de:8a:01:43:97:a6:68:80:b8:6b:e5:35:
6d:9a:13:91:fa:dc:ce:c6:ea:7b:ea:17:78:31:36:
e2:9c:65:6a:64:83:7e:2f:e9:f0:6b:06:79:1e:94:
31:93:2f:fc:63:ee:2e:f9:20:d6:9a:bd:8e:fa:9f:
8e:cd:1f:2d:98:c9:ae:ee:ef:de:ce:df:9a:9b:2d:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:A7:13:F2:8D:44:A9:0D:D6:B4:57:50:11:63:C5:BC:55:7E:F9
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:e2:e2:fd:6f:93:84:9a:19:6a:67:e3:9a:a4:31:4b:9c:
38:c8:ae:4b:f1:e2:8e:dd:db:b4:8a:28:da:56:23:f5:d6:6d:
84:90:fe:c7:2d:07:f7:c8:9f:48:8f:69:d9:06:ea:75:74:0f:
b5:8b:47:b8:2b:44:9f:3f:ce:77:27:f0:c1:0c:1e:a8:34:0b:
9a:9a:f4:b6:2b:8c:a0:77:ea:1e:7d:e0:5e:15:da:6d:d7:50:
2d:22:3a:73:a7:80:4c:e8:18:c9:74:79:1a:4a:a7:44:ce:ce:
48:ca:2e:40:fb:02:e0:02:6e:f5:f7:51:aa:17:a6:08:d7:b2:
78:01:4e:ef:a3:32:80:66:2a:79:01:19:4a:39:76:92:67:a6:
7d:bd:ed:b4:19:e7:73:62:ba:9f:3f:1f:94:45:cc:fa:ef:78:
74:bb:74:28:3e:a3:0a:a9:06:ca:61:4a:ef:f5:12:6b:da:b1:
77:01:86:28:d5:d2:30:b0:63:e6:52:27:d0:a6:62:63:c2:0f:
00:dc:f8:2c:78:0b:fb:17:a4:68:c1:84:d4:c9:df:04:37:98:
89:a7:cb:d8:26:ab:c9:f6:17:be:8a:61:0e:fb:79:3b:e9:f5:
66:82:35:7f:db:54:4f:d9:5d:e3:61:79:0b:63:47:73:40:39:
ee:da:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:59 2026 by rpki-client