Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: i0gHQ5aEdLArhORISn6xQUTGfZww/vZDCe7Ju7viLJ0=
Subject key identifier: C0:E1:77:5F:D9:14:B5:B0:FA:FE:E6:EF:80:60:EF:0E:99:68:32:DE
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019E1CEBA28F8DEAC4CF74C811CAD0C09E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:04 +0000
Manifest this update: Tue 12 May 2026 16:01:04 +0000
Manifest next update: Wed 13 May 2026 16:01:04 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: o2zXbogIZz1zFtkv7uy3PBj0bltB8Jei+iSpKQTPP04=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:a2:8f:8d:ea:c4:cf:74:c8:11:ca:d0:c0:9e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: May 12 16:01:04 2026 GMT
Not After : May 13 16:01:04 2026 GMT
Subject: CN=c0e1775fd914b5b0fafee6ef8060ef0e996832de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:9e:53:7f:d3:f4:1b:f8:5f:13:b3:31:40:
e0:9c:29:86:8e:c9:74:86:35:94:f9:5f:9b:ed:b2:
55:c5:a9:68:7a:32:b2:7d:9d:3e:45:61:64:44:4e:
23:f4:f8:96:b8:63:60:72:7c:d4:37:e1:96:3f:d5:
23:aa:d9:ec:fe:8e:8c:d8:c2:8f:3f:95:a1:58:9e:
ad:09:ab:39:95:8b:48:15:25:eb:08:4a:0c:38:44:
02:24:13:1a:04:75:04:6a:97:61:91:99:ea:6d:7d:
43:c4:0d:09:4e:df:7c:68:31:f4:e4:49:f8:21:3f:
86:a5:0a:2e:dc:8c:80:5a:e0:fb:54:34:8e:b0:c0:
8d:84:78:16:6d:c6:38:fc:87:a6:75:b1:e0:e1:73:
07:f2:d4:4c:e3:d4:f9:b2:08:54:4b:31:99:ac:dc:
71:25:37:f6:c9:dc:87:8e:e7:f7:eb:3b:0c:da:81:
02:b0:f2:ad:0d:26:22:d1:80:af:38:b3:b9:26:85:
00:df:ad:de:72:1b:e1:6c:ea:9b:7b:c9:2b:cf:45:
c1:75:15:17:5c:ee:19:43:77:25:91:41:e5:b7:89:
c4:bb:8b:8f:92:3b:95:ca:9f:8c:49:75:89:86:2b:
c8:d3:cc:77:7f:2c:e5:78:30:e3:a4:80:55:e2:8c:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:77:5F:D9:14:B5:B0:FA:FE:E6:EF:80:60:EF:0E:99:68:32:DE
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:e1:99:c4:cc:82:3f:57:15:e1:5c:75:04:93:5a:1a:d7:
4a:c1:e4:ae:06:ea:d9:ae:6a:04:65:32:36:1e:e2:a5:11:0b:
ee:29:93:3e:40:98:41:d3:5f:73:0e:e1:22:a5:e8:53:fd:37:
f4:66:5a:26:8a:0d:22:3c:4f:64:92:8a:b0:ec:7d:6c:0e:91:
db:d0:82:09:13:4b:b8:e9:3d:ea:f6:cb:a3:76:53:42:e0:d2:
0c:0a:da:8e:0a:d9:0f:6b:ed:c5:c0:c1:c9:97:18:3e:fe:4e:
73:2a:d8:78:19:73:5a:c9:12:c4:20:38:cf:3b:4d:54:ed:45:
02:3f:f8:9b:fc:40:32:39:5a:17:ca:e1:2a:22:62:a3:07:e9:
59:f5:f6:94:f6:37:b9:84:12:e6:dd:54:c2:9e:e5:fc:03:71:
e9:f4:d7:3e:e2:26:8f:4c:b7:b6:6d:6a:32:31:6f:60:cf:2d:
f1:6b:1c:eb:9a:d0:d5:67:c9:a2:9a:23:22:26:b0:0d:72:f7:
d2:10:a6:c6:58:58:83:05:81:2c:ba:f7:ad:18:b5:5d:1a:b8:
74:8a:cf:81:e7:63:c5:f7:f3:6b:b4:b1:8c:2b:9a:37:64:27:
cf:4c:a8:03:fa:c5:78:39:d4:d8:f2:51:9b:4f:44:76:70:cc:
70:a9:46:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66KPjerEz3TIEcrQwJ6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjYwNTEyMTYwMTA0WhcNMjYwNTEzMTYwMTA0WjAzMTEwLwYDVQQD
EyhjMGUxNzc1ZmQ5MTRiNWIwZmFmZWU2ZWY4MDYwZWYwZTk5NjgzMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oCeU3/T9Bv4XxOzMUDgnCmGjsl0
hjWU+V+b7bJVxaloejKyfZ0+RWFkRE4j9PiWuGNgcnzUN+GWP9Ujqtns/o6M2MKP
P5WhWJ6tCas5lYtIFSXrCEoMOEQCJBMaBHUEapdhkZnqbX1DxA0JTt98aDH05En4
IT+GpQou3IyAWuD7VDSOsMCNhHgWbcY4/IemdbHg4XMH8tRM49T5sghUSzGZrNxx
JTf2ydyHjuf36zsM2oECsPKtDSYi0YCvOLO5JoUA363echvhbOqbe8krz0XBdRUX
XO4ZQ3clkUHlt4nEu4uPkjuVyp+MSXWJhivI08x3fyzleDDjpIBV4owM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDhd1/ZFLWw+v7m74Bg7w6ZaDLeMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9/hmcTM
gj9XFeFcdQSTWhrXSsHkrgbq2a5qBGUyNh7ipREL7imTPkCYQdNfcw7hIqXoU/03
9GZaJooNIjxPZJKKsOx9bA6R29CCCRNLuOk96vbLo3ZTQuDSDArajgrZD2vtxcDB
yZcYPv5OcyrYeBlzWskSxCA4zztNVO1FAj/4m/xAMjlaF8rhKiJiowfpWfX2lPY3
uYQS5t1Uwp7l/ANx6fTXPuImj0y3tm1qMjFvYM8t8Wsc65rQ1WfJopojIiawDXL3
0hCmxlhYgwWBLLr3rRi1XRq4dIrPgedjxffza7SxjCuaN2Qnz0yoA/rFeDnU2PJR
m09EdnDMcKlGmw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:38:16 2026 by rpki-client