Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: SoLtTXxGGisk8YPf3qGXTIVUY73feE5ScqUDMp9Ml0Y=
Subject key identifier: E5:5B:32:4D:CE:2C:75:0B:32:D9:18:09:6A:A1:CB:48:B6:81:E5:92
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019E1DFE696EECAD695AADEA6BFF081538BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 172A
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: D+7WxHZE1phleqiHVAVH/V8x4ZnT0/dcAWLrj2nT2Yo=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:69:6e:ec:ad:69:5a:ad:ea:6b:ff:08:15:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=e55b324dce2c750b32d918096aa1cb48b681e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:d9:24:42:5c:29:ba:fd:a2:6a:10:68:19:
78:e7:db:a1:37:55:ac:7d:ee:1f:0e:99:a6:ba:e5:
c9:73:2e:eb:e4:65:0a:88:a6:73:c0:ef:c8:8e:53:
be:f3:26:5c:51:2c:3f:c7:e9:3e:38:e1:7b:f9:14:
87:b5:c0:63:83:27:15:e9:c2:7a:0e:96:9a:83:56:
31:1a:ea:eb:ef:70:c9:0e:9b:98:b4:75:44:57:87:
fd:3a:38:3c:cd:e3:e1:5f:ab:b7:03:2c:eb:1a:98:
4f:c6:a7:21:e4:d9:51:20:13:9d:01:fa:ed:84:13:
8d:ff:69:6a:7e:38:d9:0d:0c:3c:fc:01:a3:9d:d9:
e6:93:dc:9a:83:e0:9f:3f:c9:3e:9b:0c:a6:08:72:
63:42:64:99:dc:d5:cc:0b:c3:3f:d4:9a:31:fa:8c:
eb:36:9b:30:7d:14:47:bf:8e:21:97:88:ec:49:c8:
86:b6:9d:11:06:43:02:4d:91:f5:4c:91:8d:9d:dd:
02:28:70:0a:19:84:74:e2:99:b9:2b:4b:2c:50:96:
c5:7f:50:a9:47:b4:05:36:cb:87:66:37:76:d4:bf:
c5:6a:11:8f:74:50:f2:1f:63:d5:03:b7:62:f0:57:
02:08:55:b2:fe:03:a8:f0:bf:23:a6:e4:05:ea:88:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:32:4D:CE:2C:75:0B:32:D9:18:09:6A:A1:CB:48:B6:81:E5:92
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:9d:94:87:0e:15:af:9c:a3:4e:f7:85:67:09:5f:32:1d:
90:c1:72:0b:bf:2d:7f:d3:df:5e:e2:0e:b2:df:46:f2:3d:64:
96:12:80:5f:44:7f:d8:13:c5:b9:33:51:c5:30:89:da:f3:93:
96:33:07:13:a9:81:ae:39:8d:f3:31:27:94:03:26:2b:02:c2:
c2:9f:2c:07:2c:83:ed:5e:f6:46:a2:a6:3f:69:fc:01:d1:d5:
f8:b2:4f:c3:61:e7:76:b9:11:af:c4:e4:1e:a3:7f:65:b8:df:
97:33:bb:27:36:ca:3d:a7:0d:d8:9e:35:67:86:bc:55:27:7d:
51:fe:23:9e:79:54:5b:64:38:1c:fe:b0:f7:0c:87:1c:bb:4f:
29:63:ac:93:d7:a4:d8:31:39:ed:17:c7:fd:5f:7a:69:7b:40:
37:37:92:41:86:1b:5f:98:58:a7:86:0f:28:09:27:56:9e:93:
ea:6c:69:93:80:9e:7c:c7:c4:7c:84:dd:59:fd:db:8f:d3:5c:
2f:25:fd:d0:cd:60:b4:84:0e:b5:17:c1:77:94:b1:94:31:bb:
40:85:14:a0:77:82:8f:8c:c8:03:06:75:2c:82:32:90:2c:5f:
9b:ca:29:86:0b:8e:72:a8:7c:6e:30:44:8f:ed:84:9d:b6:83:
06:e0:16:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/mlu7K1pWq3qa/8IFTi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJmOTY1YTllYzMzZTJjMmU4N2I2MTYxYmVlZmI4YmUy
ODZjYTMwHhcNMjYwNTEyMjEwMTEyWhcNMjYwNTEzMjEwMTEyWjAzMTEwLwYDVQQD
EyhlNTViMzI0ZGNlMmM3NTBiMzJkOTE4MDk2YWExY2I0OGI2ODFlNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZDZJEJcKbr9omoQaBl459uhN1Ws
fe4fDpmmuuXJcy7r5GUKiKZzwO/IjlO+8yZcUSw/x+k+OOF7+RSHtcBjgycV6cJ6
Dpaag1YxGurr73DJDpuYtHVEV4f9Ojg8zePhX6u3AyzrGphPxqch5NlRIBOdAfrt
hBON/2lqfjjZDQw8/AGjndnmk9yag+CfP8k+mwymCHJjQmSZ3NXMC8M/1Jox+ozr
NpswfRRHv44hl4jsSciGtp0RBkMCTZH1TJGNnd0CKHAKGYR04pm5K0ssUJbFf1Cp
R7QFNsuHZjd21L/FahGPdFDyH2PVA7di8FcCCFWy/gOo8L8jpuQF6ogvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVbMk3OLHULMtkYCWqhy0i2geWSMB8GA1UdIwQY
MBaAFN4S+WWp7DPiwuh7YWG+77i+KGyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQt
YjZkMTJhYzY2ODMxLzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQtYjZkMTJhYzY2ODMx
LzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSGdlIcO
Fa+co073hWcJXzIdkMFyC78tf9PfXuIOst9G8j1klhKAX0R/2BPFuTNRxTCJ2vOT
ljMHE6mBrjmN8zEnlAMmKwLCwp8sByyD7V72RqKmP2n8AdHV+LJPw2HndrkRr8Tk
HqN/ZbjflzO7JzbKPacN2J41Z4a8VSd9Uf4jnnlUW2Q4HP6w9wyHHLtPKWOsk9ek
2DE57RfH/V96aXtANzeSQYYbX5hYp4YPKAknVp6T6mxpk4CefMfEfITdWf3bj9Nc
LyX90M1gtIQOtRfBd5SxlDG7QIUUoHeCj4zIAwZ1LIIykCxfm8ophguOcqh8bjBE
j+2EnbaDBuAWjg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:26 2026 by rpki-client