Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: e1nZPLO3c/S2a7Qi1M3H16uizMvx693wpYWwovmlZpg=
Subject key identifier: 35:85:2D:D9:6B:A3:2C:14:19:CE:50:D9:DB:1B:9F:87:63:5F:7F:16
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 019E1BD8DF1BE38FC562F0E618C91009322E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 01F2
Signing time: Tue 12 May 2026 11:00:58 +0000
Manifest this update: Tue 12 May 2026 11:00:58 +0000
Manifest next update: Wed 13 May 2026 11:00:58 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: YQi4Ib6jU2eSxgIbnZCZWzuoNiMwfV7SkNroxhsjPzc=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:df:1b:e3:8f:c5:62:f0:e6:18:c9:10:09:32:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: May 12 11:00:58 2026 GMT
Not After : May 13 11:00:58 2026 GMT
Subject: CN=35852dd96ba32c1419ce50d9db1b9f87635f7f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:68:81:04:01:9e:50:c0:ea:af:2e:7b:6b:
82:90:ac:0b:90:7f:20:6a:c7:17:c6:bc:39:8c:f0:
d1:57:6f:62:d1:b0:d5:10:e4:79:c1:42:eb:71:f3:
02:f4:14:04:bb:57:9c:3a:cb:df:46:43:7f:45:76:
75:5f:8a:6f:9a:50:aa:cf:f8:40:69:9e:00:f2:16:
10:da:71:86:61:8d:e5:b4:e1:16:fa:29:44:6a:7d:
1f:97:b6:87:45:a8:2c:23:b6:63:81:5a:3c:34:ee:
90:c3:74:30:0f:c4:10:76:6c:cf:41:ea:67:7a:ee:
cc:fe:eb:39:1c:67:73:bb:28:02:09:10:a5:27:7a:
e4:6f:aa:26:56:40:16:42:e7:9c:40:bf:fd:ad:36:
4b:48:b7:e4:db:62:70:a3:1c:a6:40:e9:59:cc:2e:
d9:d3:4e:65:d4:58:ed:1e:9b:5b:6e:ff:c2:8c:87:
3e:ec:8b:11:27:45:c4:32:24:8e:ad:43:9c:09:cd:
4c:e4:a1:ed:8d:c3:0c:4a:a7:0a:05:a1:21:a0:ac:
e9:b8:b7:a4:5d:c9:9c:eb:03:6a:9c:3e:89:23:71:
36:e2:d0:64:3d:dd:77:70:96:d0:b5:6f:88:53:d9:
84:9d:96:fc:65:38:5b:b5:41:73:3b:0f:38:f9:27:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:85:2D:D9:6B:A3:2C:14:19:CE:50:D9:DB:1B:9F:87:63:5F:7F:16
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:1d:2b:35:78:90:46:b4:53:4a:63:c3:eb:e6:14:fd:b1:
61:42:fb:50:e9:5b:2f:8f:45:a9:05:fa:6a:1d:4f:bc:57:a0:
d5:78:c4:01:9e:d3:82:30:15:7c:94:c8:08:09:87:6d:5b:57:
44:43:0e:ce:b9:1b:08:54:ab:9e:50:ca:93:ea:cf:40:77:fc:
60:bb:0b:de:10:11:ac:45:9a:6f:b3:dc:60:9b:1b:d8:90:31:
5c:68:b2:d7:36:ff:b0:44:0a:7d:ed:59:8e:7a:8e:35:70:30:
8c:ea:b8:3e:46:38:e9:a3:ba:37:d6:af:ec:a2:14:bf:c0:22:
2a:e6:f3:1d:79:c9:ed:16:55:75:18:db:81:46:be:b8:61:79:
f8:46:7f:56:f9:2e:55:d9:5f:60:1f:c4:a3:3c:a0:ad:a7:8a:
bb:53:7c:eb:00:56:6f:ae:45:24:cf:3e:c8:bd:fe:f1:b2:82:
06:11:6f:85:fd:19:e9:fb:1b:e0:f2:4f:b4:4a:bc:98:38:c4:
5c:c5:d4:39:80:4a:08:51:8c:b0:54:6d:ea:3f:56:79:a8:58:
96:7a:a3:ca:fe:d4:f3:d3:fb:ec:c6:04:2b:b0:38:e1:89:d8:
88:58:30:3d:db:c5:f3:64:5b:ad:7c:04:78:37:30:51:bd:fd:
6c:08:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:45 2026 by rpki-client