
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: +33cDJH+nE/1dQ6DyeWjnD+q0D/l9Um7sZKuDsnb+6M=
Subject key identifier: 7F:23:94:76:13:98:7E:BE:31:30:B2:53:39:C4:E3:17:D9:1A:E6:1D
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 019E1DFE5C895F145B24CC2B7330CAA07741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0B78
Signing time: Tue 12 May 2026 21:01:09 +0000
Manifest this update: Tue 12 May 2026 21:01:09 +0000
Manifest next update: Wed 13 May 2026 21:01:09 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: LVn+aeWLiM/kwKIFIPpqONZqgyXYFWm26On2B46tpe8=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:5c:89:5f:14:5b:24:cc:2b:73:30:ca:a0:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: May 12 21:01:09 2026 GMT
Not After : May 13 21:01:09 2026 GMT
Subject: CN=7f23947613987ebe3130b25339c4e317d91ae61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:26:6d:cb:3f:0c:c8:0b:ce:db:75:bb:af:
23:2b:f6:cf:d0:cd:1b:f2:1c:c3:47:43:64:66:d1:
e1:5d:1c:6d:21:0b:95:a8:d7:c3:25:4d:87:91:5e:
e5:91:23:fc:d1:84:09:18:63:15:4b:ed:13:f9:e0:
f8:71:ab:46:e1:0c:95:37:2e:20:1e:f1:03:bb:49:
75:86:fc:1c:03:ec:b8:a6:ab:3c:5f:62:e0:41:37:
4f:9d:3a:4d:50:32:8f:b1:e6:f3:bf:50:b1:92:4d:
c6:69:db:30:84:0d:2e:a6:6a:a1:d4:ae:ec:84:92:
1f:d0:3b:65:d5:3e:eb:eb:11:f6:9e:28:29:66:70:
7c:ec:30:1e:4d:b3:06:9c:00:3d:79:a6:8e:b1:c1:
f9:0b:b5:22:23:49:9a:c2:d6:b1:b8:da:9b:ec:c1:
1e:05:ac:0b:23:3d:9a:ef:a2:25:56:58:4a:52:4c:
d4:90:aa:07:fd:99:74:4b:bb:0e:fe:f7:19:e9:09:
e4:93:c5:99:2f:07:8d:24:d0:40:1a:45:aa:18:3e:
2c:53:63:b0:ef:99:89:7f:77:8f:71:4c:60:e0:e6:
33:5d:f1:f7:af:bc:16:db:69:ac:41:59:f0:ed:4c:
bb:ba:24:f6:36:fa:08:9a:ad:f3:4a:9a:f5:42:90:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:94:76:13:98:7E:BE:31:30:B2:53:39:C4:E3:17:D9:1A:E6:1D
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:6f:ba:8c:84:5a:59:c6:49:bb:d7:f3:85:72:50:a8:eb:
e4:eb:d2:f1:3f:5a:ca:68:5b:74:29:ba:67:9b:89:90:c3:16:
71:0e:e7:32:6e:17:9f:8a:6a:16:f8:d4:75:78:73:d1:8c:19:
c7:7f:88:fb:0b:75:d7:40:68:9a:60:a1:91:55:bc:18:d9:ac:
f7:2f:53:04:64:88:4d:e2:53:46:18:b4:20:49:29:6f:0a:96:
9c:63:93:e0:19:4f:4f:0d:87:ac:d9:2c:56:95:3e:24:c8:58:
b4:d9:b1:3b:7d:9e:e0:b9:ab:80:ac:b9:0d:41:5e:99:f7:35:
c1:df:b2:2e:c8:e5:1d:56:e5:4a:62:8b:94:09:6f:4b:05:d9:
09:fb:ae:9e:21:14:db:29:19:08:1d:a4:95:b6:e8:6f:1d:23:
3e:73:2c:7c:06:64:4a:88:9e:0e:5f:ad:eb:1f:bc:a1:0c:ea:
a2:66:cd:d8:85:0b:37:5c:de:b9:e2:6d:e3:65:9a:6b:4d:61:
b0:be:7e:22:93:14:15:2b:10:b7:28:ed:f9:4c:3f:41:a3:70:
fa:73:5b:1d:54:5f:62:45:8e:92:1f:61:57:14:e0:eb:32:d2:
ef:62:54:5b:a8:0c:ba:e4:2d:32:7d:39:f8:df:b5:cc:be:2d:
69:39:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:20 2026 by rpki-client