Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: ER06wGjuZpEwaYA1fVevMPqIgb37YctwEsCwMjLjphA=
Subject key identifier: E7:F3:D3:46:1C:36:FD:3B:EB:63:EB:A2:14:0F:75:47:36:3A:56:1B
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019E2023DB43A15BBCE6DB9A43F4460202A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 14EB
Signing time: Wed 13 May 2026 07:01:21 +0000
Manifest this update: Wed 13 May 2026 07:01:21 +0000
Manifest next update: Thu 14 May 2026 07:01:21 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: xPHtM4kITpExy1Yu14Lp2PuxvegveUJZZQldga7yCAs=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:db:43:a1:5b:bc:e6:db:9a:43:f4:46:02:02:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: May 13 07:01:21 2026 GMT
Not After : May 14 07:01:21 2026 GMT
Subject: CN=e7f3d3461c36fd3beb63eba2140f7547363a561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:89:82:64:9f:aa:01:6b:25:c1:7c:26:ad:
1d:98:f2:49:4e:a2:37:71:15:1a:4a:4c:f3:cd:7e:
e6:89:cd:7c:eb:61:bb:5a:2c:74:c7:8c:e4:78:d0:
ef:c2:a0:73:ca:ea:6a:d8:6c:da:30:7f:b2:27:d7:
59:53:63:f0:f1:34:86:d6:3f:e1:75:19:96:12:2f:
1d:32:7e:e9:e1:86:60:9b:e7:f0:89:64:9c:80:12:
72:b4:91:03:37:56:d2:22:52:98:9b:a7:40:2a:f9:
97:ab:8a:fa:14:66:57:b4:3e:e0:1a:0e:ef:60:38:
62:e1:da:30:5b:25:3b:d3:53:54:78:db:68:f1:46:
23:e3:24:5e:63:eb:b7:2d:b8:e1:d4:26:02:08:8b:
6d:71:50:a8:04:60:a5:9e:ef:df:cf:66:3c:92:97:
7f:3e:bc:3d:0f:ee:1a:d4:8f:44:6f:44:cd:39:5e:
91:ed:8f:f1:18:0b:e5:62:06:ff:bb:de:dd:d2:31:
fe:10:30:21:68:76:08:c1:b9:d7:f9:d4:9c:e1:4f:
29:c4:ba:44:0f:2e:17:fc:e4:74:64:09:06:ca:43:
0c:7d:14:97:dc:05:66:09:70:70:cd:be:cd:76:5a:
a1:75:df:26:de:a2:09:04:f1:68:ae:5a:fe:d7:b7:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:D3:46:1C:36:FD:3B:EB:63:EB:A2:14:0F:75:47:36:3A:56:1B
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:61:ad:d9:20:61:cb:e6:af:43:5a:04:56:7c:24:a7:1a:
26:e9:3f:13:3e:e8:44:49:c8:8c:e0:96:4f:13:cd:e7:74:ca:
07:a2:22:e7:b8:25:a6:5b:ea:09:a3:1f:9c:35:52:50:22:27:
42:6d:b7:e8:06:91:47:b4:df:2d:f1:59:11:41:39:b3:fc:60:
1c:63:7a:ed:b9:e4:59:3f:c7:17:98:59:ed:3f:0a:62:76:de:
3e:5e:f3:ef:b2:f7:f4:eb:3d:3b:52:4d:7b:ff:d9:d3:b5:34:
09:d5:56:51:fe:aa:de:c2:bf:f0:f8:ee:0d:55:4a:fe:91:97:
e9:a5:fc:47:19:fb:3d:38:97:96:c6:6b:86:0c:55:b5:17:bf:
1a:7a:a0:9f:74:5e:be:d3:70:68:46:11:cc:54:d7:7d:5f:3c:
6b:2e:64:69:93:45:e4:cd:f0:f6:e8:a0:63:41:d0:73:6d:9c:
b5:26:14:1e:48:6d:80:37:42:77:cc:04:6a:76:9e:59:63:d4:
2d:33:74:3c:31:d8:4f:46:c1:0f:22:51:f8:61:6a:76:b0:4c:
96:33:61:76:69:d4:69:ca:a3:60:b6:be:07:a4:54:19:53:55:
84:99:69:02:e8:dc:91:7d:8d:f4:c3:e0:3d:73:82:d3:6d:ab:
13:f0:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:43 2026 by rpki-client