Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: gub1yuYYe3n4ZjV/YLNwDZg6dFEfovdSrajeKug9HgM=
Subject key identifier: 05:39:B1:66:6A:5D:3A:B8:BE:2D:84:F9:AB:43:DC:F8:89:4C:D5:9A
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019E1BD8ABA8D4A6B02BD5D9D85EC9FBEE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 12C1
Signing time: Tue 12 May 2026 11:00:44 +0000
Manifest this update: Tue 12 May 2026 11:00:44 +0000
Manifest next update: Wed 13 May 2026 11:00:44 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: ZsYbS//4svXRSwZ8ZM0qy9qsOXJKYtAATGASz/RxRvU=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:ab:a8:d4:a6:b0:2b:d5:d9:d8:5e:c9:fb:ee:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: May 12 11:00:44 2026 GMT
Not After : May 13 11:00:44 2026 GMT
Subject: CN=0539b1666a5d3ab8be2d84f9ab43dcf8894cd59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:7b:7c:bb:07:f7:c2:73:aa:7c:91:21:54:
8a:4c:35:a7:75:2c:e3:57:99:22:30:df:dd:0e:3d:
61:0f:51:23:1f:7f:bb:3e:e1:9f:68:2c:67:c2:b2:
c7:66:cb:24:91:df:2c:0a:d0:75:41:00:aa:90:d6:
7e:e4:99:1f:2d:75:ad:b5:5a:3b:39:cb:8c:0a:72:
53:cb:fc:e1:eb:b8:5f:40:1d:97:33:08:e4:68:24:
5d:42:1e:c1:f5:e7:ba:28:af:78:72:76:35:13:1c:
64:54:00:bc:c1:be:64:f3:a5:50:db:b4:d5:60:2e:
91:1e:4c:54:40:4d:84:81:f4:73:6f:e8:a4:42:e0:
68:b1:ca:08:e2:11:65:56:4d:cb:93:7a:ad:6f:5c:
ee:1c:6c:c5:5b:5f:8c:96:32:e3:4a:39:4a:9c:34:
52:02:3b:38:0c:f4:f3:85:eb:d1:66:93:14:f0:cf:
e0:f7:fd:88:4c:82:ee:3b:37:7b:bb:66:49:f4:fb:
21:7c:a0:54:70:a0:ae:23:56:57:12:6e:bc:f4:b9:
23:ad:57:c6:28:58:c7:a7:fc:82:24:b0:18:7e:f8:
ac:e0:20:86:96:26:33:db:fd:b6:c7:7a:08:49:65:
72:a2:2c:60:ba:a7:58:ab:39:42:95:dd:89:93:75:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:B1:66:6A:5D:3A:B8:BE:2D:84:F9:AB:43:DC:F8:89:4C:D5:9A
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0e:bc:e4:5e:d6:12:cf:a6:fa:32:d5:5f:37:90:a4:6d:15:
eb:a1:39:25:86:ca:67:4a:cf:0e:82:dd:6f:1c:5c:72:8f:d1:
27:4f:9d:d3:46:60:51:b4:76:4c:fc:1b:66:b3:de:52:9c:b8:
fc:ec:2f:13:42:a1:42:12:78:af:3f:c7:c5:92:d2:28:12:cc:
6d:14:26:46:14:e1:3f:c2:ed:cd:66:a1:45:5e:4e:c4:5a:c2:
ea:fe:d4:b5:3d:d1:82:78:81:fd:e4:bf:14:44:90:40:8d:a4:
c4:19:11:91:61:57:19:94:c2:13:4c:2a:e0:dd:bb:2a:c0:a6:
02:9c:51:81:a3:b2:f5:22:fa:3f:0f:ef:76:0f:f2:05:0e:93:
26:ad:39:fe:57:bf:2d:82:4a:76:b8:d8:d0:99:15:93:d4:e3:
51:1b:35:10:13:e9:72:89:a3:36:c6:3a:99:a5:f3:95:cd:d0:
3b:de:bf:fe:71:2b:e9:9f:1e:3e:1a:a0:e4:2c:d4:6d:02:fd:
69:eb:56:de:50:6d:d5:b8:04:6f:d6:d5:d2:21:b6:0b:d0:ee:
6a:f9:ae:2a:43:65:a9:43:c3:a7:80:1f:3f:33:5e:75:b6:26:
f4:81:c5:b8:8e:91:b9:ad:4b:ed:86:c4:c1:d4:c4:25:23:b5:
e3:58:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:28 2026 by rpki-client