Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: NFszWEXoKbcwz71ytjUwmVw/842yvzvyq6xev6Weumk=
Subject key identifier: DD:23:20:7F:AA:13:47:5A:29:B7:0E:0B:5C:E0:AA:AE:F8:9B:D4:21
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019E1DC72C004201CBE216E7DDD0CA736109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: F3
Signing time: Tue 12 May 2026 20:00:52 +0000
Manifest this update: Tue 12 May 2026 20:00:52 +0000
Manifest next update: Wed 13 May 2026 20:00:52 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: pjdZQUBw9xRWbDZslBxDovM+Lwo33XBtHicIQ07OXfU=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:2c:00:42:01:cb:e2:16:e7:dd:d0:ca:73:61:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: May 12 20:00:52 2026 GMT
Not After : May 13 20:00:52 2026 GMT
Subject: CN=dd23207faa13475a29b70e0b5ce0aaaef89bd421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:f2:9e:b5:11:4e:11:51:7c:cf:88:21:7d:
1f:68:93:94:c7:3a:c0:2f:64:e9:9e:0a:a4:65:03:
33:d3:96:34:bf:e2:e1:e0:18:e1:d9:58:4b:e4:a0:
2d:06:28:8f:98:29:c3:48:3f:ee:a9:5a:f1:00:a4:
ba:4f:b6:d1:f3:11:4b:23:a6:34:3b:57:e5:3d:59:
76:95:05:1b:95:3c:d2:11:59:19:ce:42:6e:50:99:
58:cb:95:ca:9b:30:d8:92:c8:f4:b4:69:a8:5a:27:
d3:34:5d:ff:84:31:7a:12:67:84:4b:40:28:f5:1f:
c7:ba:72:e5:e0:84:03:f7:4b:fe:09:62:6b:79:83:
59:38:82:01:78:6f:ee:77:6c:36:94:b4:33:48:0c:
34:6c:3c:53:a0:f2:48:de:4f:5d:0d:a3:2b:82:98:
df:c7:67:b7:d0:fc:fc:05:38:48:dc:c9:f6:02:cb:
d2:3e:6f:c7:e4:ef:3f:a9:97:90:fc:74:83:70:c7:
07:3d:00:18:ff:04:94:07:e4:28:f7:3d:7e:ae:c2:
d3:ce:e4:43:88:e9:d7:90:f6:32:65:5a:92:d0:7b:
60:fc:01:93:03:52:d0:57:9d:79:de:9c:52:22:03:
47:79:f1:fc:70:03:b9:89:e2:5d:ca:cc:47:07:93:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:20:7F:AA:13:47:5A:29:B7:0E:0B:5C:E0:AA:AE:F8:9B:D4:21
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:01:b3:35:1d:2c:fd:dc:d3:dc:6b:4e:0b:00:5a:47:c5:0c:
6e:35:c9:bf:91:58:60:41:8c:02:11:55:52:4f:17:a5:1c:fc:
c5:32:3e:8f:6f:fd:2e:cb:8b:8b:f2:73:23:9e:18:f8:a6:fa:
96:16:82:a8:0f:2b:43:68:73:3b:5d:cb:ab:98:44:02:0c:9f:
bc:0e:81:c9:6f:f1:d3:58:60:b6:3d:c1:3a:4d:e3:a9:81:99:
88:7d:95:d9:10:82:b4:71:c3:c2:4f:31:f7:f9:98:7e:9a:8d:
e6:8e:f4:10:f2:35:07:84:31:89:0e:c5:aa:de:0a:f0:34:e8:
f0:56:86:05:9d:0c:b6:c4:1c:38:e0:e9:f7:a6:4e:5e:df:16:
8b:02:98:8b:48:02:72:d0:e0:4b:a3:c1:87:f3:0a:dc:86:ed:
4f:93:9a:ee:b7:06:63:e4:7d:ed:45:ba:d3:13:f8:7f:ed:b2:
86:b7:38:26:dc:92:f3:ab:90:0b:a0:14:cc:5b:f5:77:6f:49:
4a:e6:60:95:d4:f7:83:cb:95:40:23:fa:54:1a:fc:e7:da:85:
c4:30:5b:3c:fa:d4:ef:9d:ae:f5:ac:a3:9a:e0:fd:1b:e5:3b:
be:5e:f0:88:87:1a:7a:f4:53:3d:7f:55:fd:70:5b:ad:99:f4:
a2:21:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:59 2026 by rpki-client