Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: y/4+ubikS381Ikc1DlWCBK64zAAAY9EBkEfbwJdIXuQ=
Subject key identifier: 09:CE:B2:86:CE:BF:CB:12:5D:77:1E:C3:A2:50:44:EC:A4:65:EA:50
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 019E1F110FC6E5466B0172DB26E9D9D44E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:01:12 +0000
Manifest this update: Wed 13 May 2026 02:01:12 +0000
Manifest next update: Thu 14 May 2026 02:01:12 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: 90mS3ksgNg+y660MTtJqTTUySCFBft2SGsO3WH4gLVo=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:0f:c6:e5:46:6b:01:72:db:26:e9:d9:d4:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: May 13 02:01:12 2026 GMT
Not After : May 14 02:01:12 2026 GMT
Subject: CN=09ceb286cebfcb125d771ec3a25044eca465ea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:30:99:28:32:2f:2a:1a:94:3b:e4:29:e2:
0b:77:72:50:74:ac:43:70:2d:28:48:5f:22:0c:ca:
74:5b:f5:b0:e2:4d:07:38:3b:06:0d:37:e4:b1:cb:
5c:33:d3:eb:1b:16:30:65:f7:78:e7:ae:26:ab:86:
30:60:4e:9c:e2:41:ab:15:d2:0e:af:3e:30:65:a8:
d2:3e:8a:e0:f0:44:ce:e8:80:34:48:61:4b:f9:25:
fb:a7:9a:8d:cd:81:c2:9d:d9:1c:39:e6:f1:03:dd:
df:4c:2a:d7:db:4e:68:d3:16:c2:55:c6:f0:c5:cb:
5e:be:d9:c9:f1:43:4f:44:22:e5:05:7e:75:22:c2:
2e:28:c3:17:fb:77:8f:53:a9:96:75:98:34:e0:e1:
ab:77:e1:95:1d:6e:17:78:77:7c:05:d9:e1:f7:0c:
54:1f:80:f4:a5:5f:0c:8c:2e:d7:4d:67:d6:c8:f7:
4c:39:b1:da:1d:e6:3a:20:93:6f:1c:ba:ea:54:bb:
29:b7:7a:1e:d5:c7:76:20:94:de:8f:bd:08:1e:5e:
37:bf:84:36:17:15:d4:c1:75:33:dc:25:1d:ff:b5:
8d:b5:1a:55:72:54:92:de:99:83:b2:75:c9:73:76:
ee:7a:43:79:1b:e0:b1:5e:ab:6d:00:b9:a3:8d:0b:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:B2:86:CE:BF:CB:12:5D:77:1E:C3:A2:50:44:EC:A4:65:EA:50
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:7b:85:0b:98:a1:7e:2c:09:c8:21:61:72:6b:9d:c1:e4:
d6:e3:33:6b:1e:b3:60:6f:76:f0:82:c6:da:82:e4:e7:0d:8b:
ca:b3:e7:82:bb:7c:76:17:2b:36:6b:1c:40:f9:4b:6c:d2:73:
5e:25:5d:05:c5:db:49:4a:2e:48:85:55:78:66:77:0c:ee:e8:
73:39:b0:ab:59:cc:77:52:ff:5a:73:ee:d2:fe:a2:41:25:49:
ac:0b:3b:ae:73:0b:11:84:a5:0d:61:13:03:e8:29:af:77:9d:
02:30:1d:d7:c5:5b:e7:d4:23:68:7b:4b:b1:02:be:7a:c2:ae:
7f:ad:df:a7:a5:bd:62:8a:3a:7c:83:c8:eb:16:dc:c9:f6:26:
d2:0f:fe:92:00:64:ea:b8:2f:81:75:79:9e:85:37:32:ab:0b:
3b:ab:09:34:ce:df:1b:4e:5a:19:db:84:92:f2:57:90:0f:e5:
6f:5a:82:6c:02:bc:20:e2:7a:7a:7e:bb:91:3b:52:d5:1f:73:
c2:05:48:e5:be:04:d7:95:fc:06:98:7c:d9:76:2e:67:ce:2a:
3b:86:25:d8:dc:64:47:cb:13:5f:24:b6:25:70:46:c2:70:b1:
d6:d1:ef:1a:83:ac:fc:9f:bc:72:35:9e:90:f3:14:10:ed:19:
07:c7:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:50 2026 by rpki-client