Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: ItPY5IwcvscqPydlaxDweQBb2FufrugPisb5ps4xNps=
Subject key identifier: 08:A8:7C:9D:4C:AE:27:4F:F9:03:83:93:A5:87:56:08:B5:22:D7:8C
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 019E1F7E7AF2B062E31098C5F136EFC3F0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 1016
Signing time: Wed 13 May 2026 04:00:42 +0000
Manifest this update: Wed 13 May 2026 04:00:42 +0000
Manifest next update: Thu 14 May 2026 04:00:42 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: osrZeFUvEE7QulJmwxseSkh1Cp0fB4P0+/y9k6pfoLo=)
2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:7a:f2:b0:62:e3:10:98:c5:f1:36:ef:c3:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: May 13 04:00:42 2026 GMT
Not After : May 14 04:00:42 2026 GMT
Subject: CN=08a87c9d4cae274ff9038393a5875608b522d78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:ed:0b:72:de:70:76:bc:1d:c6:ab:57:21:
9c:aa:f2:eb:0b:75:27:7c:13:65:ea:95:fd:88:66:
73:62:a4:5a:f8:53:c3:64:f1:9a:37:d9:05:9a:bb:
e0:7a:3f:5f:49:26:fc:e7:5b:0a:cd:0e:92:ba:e8:
38:b2:35:36:d5:79:80:3f:42:6e:7f:14:ee:0f:e2:
b6:20:05:4a:6f:9b:39:b6:82:e3:a2:61:7b:02:96:
45:71:8e:17:b2:61:26:b4:84:8a:5e:cc:ab:27:3e:
8c:52:01:29:1b:f6:11:22:b1:81:cf:ac:7a:f6:7f:
da:eb:5d:8a:84:83:9f:eb:2a:8c:68:81:12:48:90:
33:fe:8b:35:af:23:ef:cd:d1:a8:fe:2f:87:9b:b5:
b2:8c:56:95:fb:a5:59:44:1c:05:c8:a7:fc:dd:57:
68:4a:09:50:cf:f6:fd:3f:9d:73:f7:c8:28:27:fc:
5f:99:4d:2d:3a:db:c0:1e:96:e6:24:75:2f:4d:88:
7d:aa:97:39:83:0f:bc:2e:4f:91:28:0a:81:9c:c1:
14:54:98:78:09:4b:50:98:f1:59:b9:43:2f:9b:0e:
f1:01:c8:0c:a0:f2:74:27:b3:f4:dd:df:6b:33:17:
ee:ac:e2:43:2c:1e:0b:d7:d4:2a:08:af:98:f3:e4:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:7C:9D:4C:AE:27:4F:F9:03:83:93:A5:87:56:08:B5:22:D7:8C
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3d:c5:5c:7c:31:d9:e0:52:22:32:83:5e:b2:41:66:31:d3:
6f:7e:11:b8:a5:e8:d5:4f:0d:73:71:75:26:74:9b:f6:1f:8c:
73:e3:2a:17:97:5c:77:cc:f5:2b:58:d2:1a:d6:fb:79:f8:33:
bc:e3:7a:e7:e5:ae:82:e7:30:26:1f:54:03:60:b7:dd:d5:d8:
da:0e:db:82:13:dc:fd:5a:bf:b1:4a:2d:8a:c0:bb:1f:e6:36:
90:de:78:8b:fc:fa:b3:05:7a:2e:a9:3b:4c:eb:76:8e:f1:d9:
0d:ba:a8:7e:08:95:bc:bf:e9:73:18:d4:2f:ea:a4:28:24:e9:
6e:4f:4a:ab:dd:c4:08:fb:6d:44:e0:fb:c0:48:6a:0f:45:50:
1d:5c:b3:1c:4d:07:58:c3:db:82:b2:17:db:b5:c8:72:ec:df:
7b:ff:dd:e6:91:2b:83:02:44:1b:e8:6e:3f:81:f1:1f:72:44:
a9:20:59:0a:b8:e6:b2:53:e5:a6:9b:6a:3e:68:f4:9e:6e:d4:
f2:5c:1e:67:22:a6:da:14:c2:b5:5e:db:9d:a7:e5:d5:37:2e:
78:e6:cf:c1:65:93:a7:74:ec:aa:b6:c4:d2:f8:a3:57:41:e8:
46:92:d6:79:2b:56:43:ed:f8:df:53:60:76:0c:b3:b1:b4:b5:
cd:76:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:26 2026 by rpki-client