Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: cGZ/mzhMLXVZOE/7IV6LM6LJvCJM0V0hwlWrI2Y6Jwo=
Subject key identifier: 64:33:17:57:53:01:47:90:03:5B:EA:0D:DE:F8:D1:50:44:4A:6A:4A
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019E1DFE88BC762B728431A9524DD896A134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 158F
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: akzcHyUWhsl+uQUDYzFbjuPCKcDtOsOfBG/HxFbv5EA=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:88:bc:76:2b:72:84:31:a9:52:4d:d8:96:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=6433175753014790035bea0ddef8d150444a6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:70:95:c7:90:44:4f:f9:d1:e6:2d:a3:48:
2e:6f:e5:af:aa:20:bf:3c:fb:e0:8c:90:3a:74:62:
c3:44:48:02:7b:95:04:d0:d4:47:15:f6:ab:9f:85:
98:76:09:9b:71:91:84:cb:65:05:c6:13:04:d5:4e:
3f:68:a5:14:b3:d8:b8:f3:3f:7a:89:ee:26:26:c2:
0d:f5:0d:15:93:98:9f:1a:28:e2:f0:86:46:e6:55:
64:11:f5:c6:40:12:2a:62:02:e9:a4:4c:47:9d:05:
a6:f9:4f:fa:6f:ad:7f:9c:04:0a:df:62:70:bd:52:
6a:d4:44:cf:fa:ce:48:2f:2d:c2:ad:97:6e:90:28:
7e:55:76:08:d1:cc:79:9d:c1:6d:44:29:62:06:9e:
5e:f3:e5:74:1e:9c:d5:cd:dd:d6:c8:e6:5a:d4:b7:
1a:b4:e4:ae:68:c1:44:63:90:13:7b:48:e5:c1:b7:
ed:0c:12:27:6d:72:3d:8e:92:7c:57:6a:07:29:35:
46:cb:30:38:40:6d:38:00:e5:3c:ca:16:10:c7:81:
e0:20:9d:af:5a:87:4e:e2:71:4a:67:7f:f5:86:d0:
94:7a:d6:c3:66:3d:f0:0c:96:31:fc:f1:47:49:6e:
1d:d8:a0:28:ee:02:d8:2d:9d:a0:ef:01:bd:29:f3:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:17:57:53:01:47:90:03:5B:EA:0D:DE:F8:D1:50:44:4A:6A:4A
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:87:b7:6b:ce:15:64:c3:49:da:d9:52:02:d3:f1:3a:da:
da:90:fd:ad:6f:49:f4:d5:bf:14:76:5e:a8:51:6a:86:38:03:
fc:2e:f7:bb:a7:10:3f:7b:05:28:18:5f:79:4d:c0:72:b2:7f:
f4:0a:11:c6:b6:52:2d:4b:2a:5a:e8:91:31:c9:64:03:b1:c5:
b2:9e:be:b3:30:8b:76:e8:6b:4a:c9:ae:8c:5a:12:a8:9e:49:
db:00:50:3d:94:ed:0f:e6:26:53:17:a9:c0:84:f7:c2:01:4f:
57:34:6c:b1:bf:8a:ee:d3:46:8f:cc:2d:ae:e1:85:d8:25:09:
5e:88:c4:d9:6b:81:d0:d7:f3:6c:ff:4e:8b:21:9f:3f:fa:e8:
b1:56:1d:eb:ab:d1:4c:a2:e3:1c:c3:d5:29:73:2d:09:57:29:
42:4e:4e:15:50:8c:99:f1:85:75:12:de:70:3b:3b:e1:92:06:
61:1e:e5:45:34:36:0c:1b:cc:f5:ad:19:83:a4:64:84:2c:17:
23:8c:ae:d3:5a:27:88:98:60:c1:fa:a2:3b:71:74:89:3f:2b:
40:b4:6d:72:ea:2c:02:cd:1b:b9:ac:dd:f2:02:c4:7e:bf:dc:
c5:95:6f:5f:3b:4f:09:5e:47:4d:da:e8:fe:a6:5e:3a:2c:4c:
69:b5:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:14 2026 by rpki-client