Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: ujGiE4Y4+M1RLiGV99M6tyEBxyzBTp89pkV279jEDsE=
Subject key identifier: 4D:37:83:B9:6B:CD:2C:DF:5F:8C:FB:6D:1C:AE:7D:AD:BA:E7:1F:BE
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019E1EA32E9B649D027083D5A2A87310A354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 032B
Signing time: Wed 13 May 2026 00:01:11 +0000
Manifest this update: Wed 13 May 2026 00:01:11 +0000
Manifest next update: Thu 14 May 2026 00:01:11 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: Q8vZnloqAObdOI3u2Jgxce9EZVg6vpU95IAq9TSdV0o=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2e:9b:64:9d:02:70:83:d5:a2:a8:73:10:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: May 13 00:01:11 2026 GMT
Not After : May 14 00:01:11 2026 GMT
Subject: CN=4d3783b96bcd2cdf5f8cfb6d1cae7dadbae71fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:7c:16:df:42:ee:41:d6:dd:58:e1:70:7f:
6c:4c:c6:b2:69:89:80:e8:3d:38:7c:ac:a6:9c:d9:
a0:42:91:18:03:47:07:59:e2:dc:f1:04:e5:82:82:
75:20:10:a6:59:c4:1b:90:3f:17:ba:56:5d:69:06:
94:17:57:59:db:21:8e:41:f6:42:ee:37:8f:e2:58:
81:60:3e:8f:7e:0a:e8:06:90:d9:d0:85:df:15:69:
99:04:8f:5b:c4:00:a3:34:7f:9d:f6:ad:1d:4e:5e:
b7:71:c5:cc:a1:67:55:ae:bf:43:88:74:75:dd:4b:
02:aa:c1:2e:27:c6:16:73:bb:b0:c3:b1:a8:8c:d7:
51:8c:06:89:03:90:85:6a:1d:6d:1f:8c:4a:6d:0b:
97:4c:8e:17:06:a7:bf:fa:48:a0:1a:8b:13:83:6b:
69:1e:07:db:06:da:49:48:a8:56:85:ee:1f:49:96:
02:a7:3a:ee:e8:e8:b9:12:e3:ed:93:78:27:aa:5e:
31:16:96:dc:25:07:6c:04:ea:28:74:0f:3e:7c:42:
66:a2:ae:46:f6:f1:53:3d:f9:92:d5:e6:61:c5:31:
0b:4d:5a:78:f7:df:87:e1:d6:b7:f0:3b:61:22:6d:
2c:1a:1d:fb:12:a4:80:0b:f1:a7:16:63:70:ca:a8:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:83:B9:6B:CD:2C:DF:5F:8C:FB:6D:1C:AE:7D:AD:BA:E7:1F:BE
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:d1:d1:a1:af:dd:31:91:2e:a6:41:ff:ad:c5:8f:da:b0:
af:36:bc:25:ac:42:7a:8a:33:60:05:a7:16:b9:c9:98:08:8e:
62:62:c4:86:77:b0:7f:5a:db:60:8e:74:81:33:d4:66:48:5c:
63:36:27:fc:55:76:68:dc:02:04:7c:66:ed:7f:e3:fe:a3:9d:
ee:8c:7d:8d:ab:60:db:3f:2d:bf:8d:19:08:cc:7c:66:47:70:
d7:b3:ff:1b:8a:1c:d2:7e:2b:c2:15:4b:1b:0f:97:df:2c:aa:
36:fc:7b:ab:3b:f7:d2:be:98:5e:bd:c6:31:ce:93:f8:db:bd:
b9:b5:16:a8:50:18:75:aa:5e:b3:96:ef:93:40:c1:f0:d2:bd:
de:b2:24:7b:b9:50:15:b2:98:6f:07:55:e4:45:ff:f0:e8:2e:
a6:fb:a2:97:ad:75:3a:43:a8:94:62:ff:e0:f8:2e:72:11:fd:
7e:6c:6a:86:8a:ef:f8:3c:27:47:d3:d5:4e:27:b3:87:7b:d5:
59:68:75:3c:84:28:90:db:cb:68:38:44:db:2e:ef:20:5f:ec:
a6:f2:6d:d7:08:e4:2c:cd:e8:63:59:9f:c0:ad:f1:13:21:83:
9b:ab:97:98:1b:e0:9a:4e:50:46:90:e2:5f:5a:bc:10:3b:61:
36:a1:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:53 2026 by rpki-client