Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: ZeXiS4WOB02wtPlRYH7zt+rMa4f9Gu3eQExGJyvM044=
Subject key identifier: 86:12:A0:CE:B5:5B:CB:A1:91:9D:1B:8E:7D:F8:00:11:5E:0F:E7:CB
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019E1C468854384F848E554A17CFA3E7B546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 190F
Signing time: Tue 12 May 2026 13:00:44 +0000
Manifest this update: Tue 12 May 2026 13:00:44 +0000
Manifest next update: Wed 13 May 2026 13:00:44 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: coy0k0PrJl6Phl8D5HgOF6utvtGwY7bm0s+fQJZDJII=)
2: BkDRLAa3B4lViMgjpTtfQSFV14I.roa (hash: FjVWnkZKxfwmWvnmDOyzpHJdLPGSitKsvtBzxG3wncA=)
3: nFz68vxexIG1S-RusF1_qXkv1Yc.roa (hash: CL/0BWaI5R4mYNyzheF3UgRNXWDP8rh4d3WLBBru+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:88:54:38:4f:84:8e:55:4a:17:cf:a3:e7:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: May 12 13:00:44 2026 GMT
Not After : May 13 13:00:44 2026 GMT
Subject: CN=8612a0ceb55bcba1919d1b8e7df800115e0fe7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:49:75:c2:f5:68:a0:ea:2b:f2:81:5a:a1:
d9:ad:65:2b:39:a6:e5:e3:a0:40:61:20:8a:7e:d1:
6b:08:a2:ef:49:0a:05:b6:e8:76:05:96:e8:6a:a7:
dd:25:4e:2a:08:db:55:e0:83:a5:72:20:ae:e5:db:
8a:d2:99:68:a6:f5:ba:cf:1b:63:a9:7e:d4:17:6b:
73:81:a4:d7:d9:07:4a:a4:14:ea:a6:31:0c:1a:b2:
e4:28:ef:0d:7d:81:26:02:07:e5:1d:80:ea:2d:e5:
16:1c:2a:23:ce:6d:18:67:30:ab:bc:99:4c:b0:62:
e8:de:37:fe:fd:05:a4:d4:99:4e:3b:81:24:ba:74:
12:db:90:e4:fe:ee:3d:1f:dc:25:a7:8c:f8:7b:98:
07:01:6f:3b:08:9f:7a:98:fe:e2:0e:90:c9:c9:ec:
fd:d2:9b:05:2a:34:7e:37:b3:a3:e4:cf:52:b3:1b:
6f:63:be:80:77:58:c5:77:e1:30:c7:f5:fe:90:bc:
e8:cd:de:35:6b:58:2f:31:ad:ad:cc:a2:d0:16:b5:
c3:81:5c:d5:33:d3:d5:3a:2f:f0:60:f6:8f:1d:b5:
4c:d4:d7:2e:b0:f4:a9:07:2b:87:28:f1:55:15:44:
f4:b1:04:22:63:4e:7f:9d:af:86:40:2c:21:1f:66:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:A0:CE:B5:5B:CB:A1:91:9D:1B:8E:7D:F8:00:11:5E:0F:E7:CB
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:a4:0b:cd:8b:a0:be:b3:76:70:32:3a:aa:31:ba:61:d2:
51:84:87:2e:b3:99:68:eb:93:c9:31:32:cf:c1:03:d6:41:72:
06:4c:1d:ed:5e:8a:41:3e:46:b8:69:cf:0e:a3:42:68:53:2f:
af:60:da:b4:f0:8b:29:66:a0:2a:e3:9c:a0:93:5e:f3:99:40:
e3:5a:4b:b8:a2:c8:51:6f:bb:4f:5a:a5:35:71:6b:f2:fa:01:
86:bb:35:a1:af:9e:dc:52:14:2d:42:53:b4:21:86:b9:b1:71:
97:ac:b4:49:76:88:be:01:0c:13:3a:37:5e:74:4d:97:56:ac:
6e:55:c4:36:e0:ca:c1:5d:02:6f:ba:1e:62:51:44:2d:c4:51:
43:74:65:c7:3d:eb:94:7b:62:74:fa:a0:fc:16:b5:63:0a:0a:
76:19:e3:44:c1:0f:d6:02:b6:32:c2:0a:14:6a:0a:a3:20:84:
3c:7a:af:21:24:98:a6:15:36:36:23:58:97:08:50:4f:ef:81:
db:23:c8:44:bf:3b:f0:01:36:3c:5f:21:c9:99:0e:a9:83:01:
dc:9c:cf:e3:4e:f3:7c:ce:87:23:87:a4:30:c4:a3:57:be:21:
30:d6:ff:bd:dc:00:d1:a0:4c:8b:ef:6f:ab:f6:a4:31:1c:31:
89:d6:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:28 2026 by rpki-client