Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: tdNiDTy/oEwc3uKNAOggAeLCKXyfw1D8+d7zTqB33i0=
Subject key identifier: 31:1F:E4:99:ED:81:F2:F2:69:EF:C4:C7:A2:11:1C:5D:B1:13:4E:CF
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019E1E6CB3C9EEFD8F1E751DDA61C4428665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:40 +0000
Manifest this update: Tue 12 May 2026 23:01:40 +0000
Manifest next update: Wed 13 May 2026 23:01:40 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: JlK9AovqDhxA0HB6BZ8H2Iahha7/5/umZuafl6dA5I8=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b3:c9:ee:fd:8f:1e:75:1d:da:61:c4:42:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: May 12 23:01:40 2026 GMT
Not After : May 13 23:01:40 2026 GMT
Subject: CN=311fe499ed81f2f269efc4c7a2111c5db1134ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:85:24:b9:fb:75:e2:e7:fa:7c:90:15:08:
25:31:c4:03:d6:9f:61:23:c6:03:18:3d:34:8e:e5:
7e:83:d2:26:79:73:de:05:7e:c7:40:44:94:40:6c:
1a:38:96:ea:2a:ad:68:33:41:3a:17:70:00:91:80:
e2:29:c8:01:3a:e2:dc:3a:ac:cb:0b:c1:90:00:51:
83:5a:b2:bc:cd:4e:f2:51:79:96:eb:02:69:de:4b:
21:92:2d:f1:2f:61:4b:c0:dc:8a:97:4d:8a:ab:d7:
c2:c9:3c:00:70:f0:b6:e1:7b:31:55:90:96:d7:fb:
cd:a0:d2:12:96:11:ae:da:88:57:5f:f9:8d:36:8e:
cd:8e:5c:68:d3:76:f9:ed:0f:dc:bf:40:e1:0e:c6:
48:07:15:19:e0:37:3e:99:86:72:b4:cc:60:8d:d2:
02:1f:5c:a7:88:63:b5:41:5e:8f:f1:4e:66:00:ef:
e7:03:d3:f9:28:3c:26:65:67:56:1d:77:0e:cf:4c:
2f:dd:8f:7c:53:25:ee:73:c6:38:79:4a:70:fe:30:
ac:cc:f3:9b:a7:74:66:db:09:9f:8c:6b:f9:d1:d1:
20:45:47:7a:5d:40:ac:46:77:79:3e:0f:24:fe:5e:
a9:44:cc:ce:8f:a1:d2:ba:00:73:a5:c2:cc:32:f1:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:E4:99:ED:81:F2:F2:69:EF:C4:C7:A2:11:1C:5D:B1:13:4E:CF
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:67:28:ca:44:3c:9a:19:74:01:a8:61:05:55:f3:7c:e5:4f:
e5:68:01:b8:99:16:49:a5:7e:5d:78:0e:0e:ee:bc:37:3a:15:
11:69:7d:7f:8c:71:91:c0:ef:e5:ec:91:55:17:d4:f2:25:66:
06:d2:a0:40:8f:92:27:ee:ed:95:fb:e7:c2:ee:c4:4a:18:5e:
a8:55:53:77:f4:e0:f6:c3:67:89:a2:f3:1a:a9:2b:93:6e:3e:
3f:ec:1f:03:ec:bc:43:84:b8:e7:dd:cd:9d:07:12:1a:25:bd:
d3:7f:fb:30:e4:b7:89:60:9d:fb:11:b3:e2:3b:62:ba:c7:31:
46:07:eb:ed:98:9c:b8:44:67:45:61:69:87:bb:e3:2f:80:0b:
8c:35:e2:b1:6f:44:2b:ff:35:02:a0:4f:9e:7e:f4:a3:db:3b:
58:16:c3:d5:91:5d:b6:c2:f4:10:f4:a2:56:48:1b:ed:69:0d:
52:ac:b2:20:16:52:87:ad:e1:46:b1:2f:77:c2:52:bf:c7:33:
61:05:ca:8c:70:30:9d:aa:ed:0e:ba:7e:90:0c:b7:9c:e2:33:
c9:c7:23:4d:f8:09:d0:58:71:85:66:c3:df:3a:13:c6:8f:38:
5b:21:b5:8b:fe:c5:47:9d:a7:2a:4b:44:63:63:1a:19:b5:72:
1e:68:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:22 2026 by rpki-client