Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: 7HbIMsllClABFiOn/m5N4IwrXrDs6+xBjHrOw3l4Vok=
Subject key identifier: 5E:F7:FA:1A:78:93:97:FF:D7:B1:C1:01:83:14:A0:24:4A:45:28:1E
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019E1D90333C3660D51DA060666DE6425369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 073B
Signing time: Tue 12 May 2026 19:00:49 +0000
Manifest this update: Tue 12 May 2026 19:00:49 +0000
Manifest next update: Wed 13 May 2026 19:00:49 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: uWFeOmtwqxGekcVkXXxob/m9/iGTOfAbLXF4oPDZOMo=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:33:3c:36:60:d5:1d:a0:60:66:6d:e6:42:53:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: May 12 19:00:49 2026 GMT
Not After : May 13 19:00:49 2026 GMT
Subject: CN=5ef7fa1a789397ffd7b1c1018314a0244a45281e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:1c:a2:d6:51:89:68:e1:73:7d:84:c6:61:
99:97:69:44:5b:f7:d2:c2:26:7b:b1:ce:19:01:c6:
1a:b7:bd:12:41:f6:09:bc:1c:b1:0b:0b:12:71:0b:
67:b7:20:91:99:fb:b8:f0:8e:9c:9d:dd:7f:61:61:
07:e5:17:c0:e8:44:41:89:53:43:f6:54:b0:ae:34:
70:a0:56:32:a1:4e:9b:af:07:13:fb:9b:25:d8:39:
5c:9e:18:58:10:72:47:5c:68:0b:41:0f:42:e8:fc:
1d:49:fb:1b:5d:35:f0:a3:74:f8:3c:10:ed:86:0d:
67:de:fd:b7:99:80:fe:2a:f9:b0:2e:c0:7c:03:6f:
46:35:8f:21:c0:1e:b0:4c:66:c2:fb:9a:0f:82:88:
cb:3a:27:30:a1:26:ee:95:b9:7f:da:ee:0d:85:82:
34:00:2b:6f:ff:c5:be:46:12:62:dc:4b:23:35:9a:
8f:5e:6b:7c:7e:99:36:c6:69:1e:9f:7e:e2:0f:e0:
76:24:97:7e:5f:ef:8a:e0:0b:b5:0e:89:bf:14:4b:
01:98:c4:1a:8b:df:5f:73:c0:e3:1b:1a:e4:f9:c8:
3f:c5:13:25:82:da:55:5e:10:19:e2:4b:e2:d7:14:
e5:b5:67:56:8f:5d:4f:a3:9b:09:81:ff:a6:9b:ff:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F7:FA:1A:78:93:97:FF:D7:B1:C1:01:83:14:A0:24:4A:45:28:1E
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:65:00:d3:df:0e:59:f6:8d:db:0c:7c:6e:9e:45:c1:25:76:
5c:d1:f7:57:85:bd:91:81:08:1b:4b:69:a4:06:53:d1:1d:35:
4d:05:1c:ce:a3:79:ef:7d:3f:25:df:09:bf:fb:95:f8:9b:4e:
9a:dc:a1:74:d8:bc:56:d2:17:91:25:4e:b4:1d:5c:d6:4d:c0:
d5:f4:ee:c9:87:ff:09:33:40:e3:4b:3b:ff:68:a8:17:55:21:
c8:85:d4:93:53:90:d1:7b:23:29:11:b9:d7:35:e7:33:86:4e:
c9:33:50:2a:88:be:3b:33:07:cf:be:e0:0e:2f:8c:c6:44:df:
42:05:d2:12:2e:f4:01:3c:bd:01:2f:17:1b:32:e4:75:df:38:
05:70:c6:79:a5:06:cc:07:0e:b2:7e:37:5f:15:0d:7d:de:e8:
fb:2f:9d:a5:2c:1b:1d:c6:2e:2e:14:28:8d:66:b0:db:c5:ff:
db:5d:23:a9:f5:9c:d5:4d:b7:41:aa:82:f6:97:b9:c0:ec:e3:
ad:1f:95:fb:53:8c:9a:92:1f:27:79:a6:e0:33:40:2c:d7:ac:
5e:c6:4a:8c:08:df:65:d3:a9:12:30:0d:08:1f:98:74:94:79:
d7:e4:75:1d:1b:45:5e:0e:38:f6:b2:b5:a5:db:79:8a:93:00:
eb:d7:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:05 2026 by rpki-client