Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: CLB9F4eKXp2t+als0121/C3ClDAywpY2MDZFgaSmZjA=
Subject key identifier: B8:F6:45:D7:24:66:83:8C:71:85:73:5A:91:B6:37:97:09:96:85:B1
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019E1CEB3EFF6B9BBED5DC5FC37899368DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:00:39 +0000
Manifest this update: Tue 12 May 2026 16:00:39 +0000
Manifest next update: Wed 13 May 2026 16:00:39 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: cbvlWUSKS6TSYSRqpmSj9iM2KJpRq2BkKN3QXEKILT0=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:3e:ff:6b:9b:be:d5:dc:5f:c3:78:99:36:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: May 12 16:00:39 2026 GMT
Not After : May 13 16:00:39 2026 GMT
Subject: CN=b8f645d72466838c7185735a91b63797099685b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:4d:af:ee:3d:dc:a8:0c:f2:c8:56:9c:a6:
8a:bd:65:f2:40:5b:b6:99:19:9f:1e:dd:e8:04:5b:
b9:c6:61:db:2f:56:4b:7f:31:e2:b1:0c:e6:27:15:
56:d8:3a:2b:90:a2:0f:e3:ae:66:02:29:10:0a:8c:
61:f9:af:97:c6:b8:8e:4d:cb:a2:53:8e:49:a6:8e:
50:bd:d3:73:2a:3f:44:b2:1d:89:eb:da:db:7c:fc:
4f:b1:f3:63:9e:75:54:06:44:f0:cd:45:be:2c:f8:
dd:b2:7d:e9:ec:82:b5:4f:4d:04:66:88:03:ad:4d:
7a:f1:77:73:28:36:42:85:d4:7b:0b:90:4a:f2:76:
34:8a:de:3b:ed:e7:78:18:35:3c:56:cf:3b:08:47:
9a:b5:ce:20:ec:6b:e1:f0:e2:5e:6a:5a:4a:28:bc:
55:db:ae:cc:c6:72:89:af:d2:d4:83:ac:b1:42:8e:
d4:ae:75:bb:b9:82:e4:07:78:cd:03:ce:2a:b1:6a:
39:78:ad:7a:48:17:2f:50:45:61:4b:60:b3:22:de:
85:5b:58:fc:cb:6a:d4:20:c3:72:0a:18:19:21:7d:
51:c4:6b:7f:25:7b:e9:ed:83:94:57:5a:1a:91:15:
c2:c9:f2:eb:d8:3c:92:39:fd:ea:cd:ab:6a:48:b8:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F6:45:D7:24:66:83:8C:71:85:73:5A:91:B6:37:97:09:96:85:B1
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:65:87:13:c6:ed:1f:0e:a4:ed:2f:79:a4:ec:a9:fb:30:
fd:5c:56:28:1b:55:68:4f:c0:a9:e9:c5:ec:7a:e1:9f:ba:af:
db:91:c5:68:f7:96:f7:66:0f:9d:4e:a1:61:c2:d7:35:37:68:
8f:46:66:b0:43:a0:61:e4:3a:ef:38:33:5b:d0:ba:ab:d3:14:
ad:fd:21:1d:5e:37:cd:7f:ea:b0:e1:f0:47:04:2c:32:3e:6a:
0e:a9:d3:66:07:75:c5:2d:fd:3f:70:cb:58:0c:3f:08:fc:05:
f9:ed:7b:2a:89:09:5d:3c:4d:57:f2:12:8b:ba:d5:ae:20:3e:
03:9c:78:e6:d3:bb:db:ce:a8:d0:11:75:8a:d6:e4:43:2f:7f:
a5:c1:d7:01:90:0d:ac:00:4d:0b:67:b2:ae:e8:bf:c1:86:95:
20:0a:c1:72:fa:ba:88:bf:3b:42:96:08:fd:52:27:97:bd:d7:
d7:07:c1:1d:a7:e5:ab:e6:04:88:ef:1e:42:92:4a:92:59:75:
c1:04:e4:de:c1:d7:cb:ef:8e:30:a6:da:b9:19:11:ab:a0:ee:
49:e5:37:db:7b:f7:7d:12:18:e9:57:44:5b:99:77:90:90:fc:
e3:bc:fe:bf:c0:19:4c:90:b6:48:a8:f5:4c:4f:10:ce:ba:10:
2f:43:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client