Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: AvnWTyi7+zsfwUnWJi6nY5Snqeot+HQKOiJMG6TZxzo=
Subject key identifier: AC:70:B6:AA:A3:F9:E2:C3:6A:7C:0A:AB:70:B2:4E:07:FA:45:71:6C
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 019E1BD8C61F97B42F58B31687E277FBB2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 022F
Signing time: Tue 12 May 2026 11:00:51 +0000
Manifest this update: Tue 12 May 2026 11:00:51 +0000
Manifest next update: Wed 13 May 2026 11:00:51 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: oc7ESk5O7EfFroDeEey2kXb/WmcPcG1Pbohfsbcs5t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c6:1f:97:b4:2f:58:b3:16:87:e2:77:fb:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: May 12 11:00:51 2026 GMT
Not After : May 13 11:00:51 2026 GMT
Subject: CN=ac70b6aaa3f9e2c36a7c0aab70b24e07fa45716c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:3b:7c:04:68:e5:15:23:39:13:cd:de:78:
f9:01:cc:b8:55:e7:be:4b:64:51:8b:4c:de:78:3a:
ae:a4:5d:c7:95:c6:8a:6d:88:ac:9a:10:7f:31:85:
2a:6a:9a:05:91:3e:6d:e5:7d:b8:c9:15:f4:38:65:
a1:d5:96:6c:7d:96:ca:6c:af:75:cc:72:a8:f4:4e:
ea:b2:28:9b:70:f3:4b:04:02:e0:73:59:50:18:0a:
d8:71:a5:ed:05:6b:f3:04:65:76:23:ec:ba:82:b0:
77:f5:ee:e3:ea:cd:bc:52:06:09:92:b4:30:cf:ca:
62:fe:88:05:b2:79:8c:26:66:61:bd:8a:4c:ed:e5:
25:af:66:8f:62:91:de:58:69:05:e4:93:12:9b:06:
80:57:0f:43:fa:f4:c2:7b:40:fb:95:59:f9:b7:fc:
b9:11:05:68:75:72:6d:27:1a:21:05:bc:71:01:83:
7e:88:db:50:f8:3c:8b:74:9a:b1:35:fd:e1:d5:cd:
1c:f2:cf:7f:50:39:2c:b6:81:33:6e:1e:a6:7b:35:
26:0b:ac:f5:73:81:22:6a:3b:18:9c:e7:13:61:67:
d6:16:a8:29:53:37:8a:01:b8:84:44:03:ad:a4:9e:
07:c6:e4:60:47:b5:68:22:c3:3d:53:e6:c9:9d:3b:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:B6:AA:A3:F9:E2:C3:6A:7C:0A:AB:70:B2:4E:07:FA:45:71:6C
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:50:b2:c2:5b:37:dc:69:c6:f3:cc:37:de:2c:d8:46:1b:
42:ac:60:3e:52:b4:db:85:05:61:c1:69:49:ca:af:e9:fb:b0:
c6:74:79:0b:7a:8f:6b:a9:3b:87:28:3d:e4:09:fa:0d:b8:da:
38:3d:2e:f7:42:34:68:91:4c:17:83:f0:0e:45:e7:dc:26:54:
fa:05:7f:ed:5c:f4:12:6d:41:18:52:16:d5:c5:21:8e:37:f7:
fa:6b:0f:98:d2:cd:b0:86:ac:11:06:47:4a:8a:46:1b:4b:70:
d4:af:1d:74:ab:c4:a2:41:89:d5:6d:f2:8f:8c:7d:8a:dd:ea:
ea:e5:14:2c:e4:a6:0c:26:b0:11:c3:1f:b9:0b:ae:bd:e1:d1:
86:d2:74:ca:b2:5e:26:c2:42:0a:d3:24:cb:93:13:8f:4b:75:
58:57:00:bb:35:1a:dc:e4:b7:e3:c4:89:44:be:d5:47:4a:8b:
b0:9d:9a:c4:28:ee:7c:a4:5d:84:78:69:da:4d:92:e3:af:79:
32:cd:e8:5b:48:cb:12:0b:96:0b:74:aa:7e:ea:65:7e:72:bf:
2a:25:cd:95:1b:6e:a5:3a:80:1f:69:4a:fc:7a:5f:48:40:18:
e2:9d:eb:f4:03:e3:16:45:4a:64:57:41:71:29:2a:07:7f:44:
96:d0:d5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2MYfl7QvWLMWh+J3+7LzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmIyMTg0YWMyMmUzNGQ4YzQ0ZGE2Yjg0NTQ5YmJhNzFm
ZDU1M2QwHhcNMjYwNTEyMTEwMDUxWhcNMjYwNTEzMTEwMDUxWjAzMTEwLwYDVQQD
EyhhYzcwYjZhYWEzZjllMmMzNmE3YzBhYWI3MGIyNGUwN2ZhNDU3MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55M7fARo5RUjORPN3nj5Acy4Vee+
S2RRi0zeeDqupF3HlcaKbYismhB/MYUqapoFkT5t5X24yRX0OGWh1ZZsfZbKbK91
zHKo9E7qsiibcPNLBALgc1lQGArYcaXtBWvzBGV2I+y6grB39e7j6s28UgYJkrQw
z8pi/ogFsnmMJmZhvYpM7eUlr2aPYpHeWGkF5JMSmwaAVw9D+vTCe0D7lVn5t/y5
EQVodXJtJxohBbxxAYN+iNtQ+DyLdJqxNf3h1c0c8s9/UDkstoEzbh6mezUmC6z1
c4EiajsYnOcTYWfWFqgpUzeKAbiERAOtpJ4HxuRgR7VoIsM9U+bJnTtUBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxwtqqj+eLDanwKq3CyTgf6RXFsMB8GA1UdIwQY
MBaAFN5rIYSsIuNNjETaa4RUm7px/VU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wYTg2ZmMtZGUwOC00MjM0LWE1YzQt
MTE2NTBjZGI5YzkxLzEvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wYTg2ZmMtZGUwOC00MjM0LWE1YzQtMTE2NTBjZGI5Yzkx
LzEvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBBQssJb
N9xpxvPMN94s2EYbQqxgPlK024UFYcFpScqv6fuwxnR5C3qPa6k7hyg95An6Dbja
OD0u90I0aJFMF4PwDkXn3CZU+gV/7Vz0Em1BGFIW1cUhjjf3+msPmNLNsIasEQZH
SopGG0tw1K8ddKvEokGJ1W3yj4x9it3q6uUULOSmDCawEcMfuQuuveHRhtJ0yrJe
JsJCCtMky5MTj0t1WFcAuzUa3OS348SJRL7VR0qLsJ2axCjufKRdhHhp2k2S4695
Ms3oW0jLEguWC3SqfuplfnK/KiXNlRtupTqAH2lK/HpfSEAY4p3r9APjFkVKZFdB
cSkqB39EltDVAQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:23 2026 by rpki-client