Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: kI9CwyWUHaAApA/QQtSK/rx27KkOzc2kU+JHOBqTnIc=
Subject key identifier: A1:58:AC:BF:09:64:47:3A:D1:00:9D:83:5A:1F:57:E2:C2:5F:6A:B1
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019E1DFE53AA30E5D49903352B6438E161A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:07 +0000
Manifest this update: Tue 12 May 2026 21:01:07 +0000
Manifest next update: Wed 13 May 2026 21:01:07 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: 1gdFR8kmjRfP9vG/RXOwnKNeQP5K5WzObNudZ6oezyw=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:53:aa:30:e5:d4:99:03:35:2b:64:38:e1:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: May 12 21:01:07 2026 GMT
Not After : May 13 21:01:07 2026 GMT
Subject: CN=a158acbf0964473ad1009d835a1f57e2c25f6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:01:83:13:d5:80:73:80:82:7e:05:8c:74:
5a:bd:9f:df:50:c9:d2:9e:11:34:5c:34:9a:f8:44:
f3:c0:e7:a0:1e:61:aa:64:3d:ed:eb:15:75:49:52:
6b:e8:ff:2b:f2:c7:d8:2e:f7:39:31:4c:a4:9e:95:
60:a9:7f:1b:4d:e3:ae:0d:91:27:35:3c:c6:6e:db:
25:9a:d8:0c:df:bb:82:41:a2:11:e6:f7:8a:44:65:
75:87:3b:9a:0c:4b:b7:d3:60:7f:ad:b6:53:42:e1:
ec:93:b9:60:25:50:a3:31:87:57:34:ec:9f:5c:80:
c3:a8:ca:e7:eb:13:d8:f9:7e:b1:32:64:2a:18:7d:
81:21:c5:68:8b:32:a1:d0:2d:49:45:c9:0b:3a:43:
4c:f2:5e:e0:3f:be:cd:47:cd:9b:33:9a:55:0f:30:
aa:85:d3:8e:bb:d7:c5:9c:08:4b:1a:0a:0b:37:3b:
47:16:3b:ca:c8:4c:af:07:0a:1f:91:7a:31:70:c8:
9c:2a:d1:88:60:1c:94:45:82:85:54:94:c5:09:39:
d0:c4:d6:a5:84:77:51:75:78:95:a2:24:d4:6c:3f:
c0:14:6a:d2:cf:b7:3f:d0:4e:bf:40:fc:9e:c1:18:
d3:c7:0d:65:1b:e1:8f:02:f4:3d:4e:31:59:36:cb:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:AC:BF:09:64:47:3A:D1:00:9D:83:5A:1F:57:E2:C2:5F:6A:B1
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:6e:9d:eb:ed:d8:c8:27:cd:12:62:cf:a5:07:f2:12:96:
bf:07:ea:f3:40:de:03:1c:13:c4:2d:79:f4:e1:d3:7d:0e:32:
8f:d5:c9:30:5e:ae:9a:80:c6:8b:5c:cb:fd:24:60:ab:88:c3:
b4:98:29:a8:8b:8c:63:ef:38:53:55:42:64:14:85:12:ec:b4:
7a:a4:c4:d6:6a:34:a1:0b:bd:50:96:35:69:27:69:71:2f:59:
90:f0:e7:e7:21:05:92:04:f8:64:33:33:80:5e:e4:dc:f9:36:
b2:4b:76:44:c8:bb:f7:e6:67:ee:85:ab:97:7e:6f:2e:1d:48:
5e:db:7a:2e:76:74:d4:a1:ac:18:87:24:92:81:e7:49:28:01:
af:e6:07:c6:f9:0d:ab:2c:27:06:bb:04:7e:c7:2e:4a:98:46:
f3:21:98:0d:ea:59:dd:8e:e7:f2:b5:bb:46:1a:4a:89:4b:44:
6d:d8:56:d9:96:1b:91:6d:d7:7a:21:f4:74:cf:14:70:e3:91:
ce:a9:00:1e:2b:4c:5e:48:38:ab:90:77:9f:12:b4:0f:83:a6:
11:68:f3:27:71:80:fd:16:08:91:f2:aa:8f:25:06:32:76:07:
cc:a9:f2:0f:9c:d0:d4:e3:1c:5d:24:68:03:fd:08:f9:e4:ad:
d7:56:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:12 2026 by rpki-client