Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: 3xrLDNdEPBQLAo1NZ1Qe+5a5F/VtyXRBYVowfzXOY3s=
Subject key identifier: 1A:53:A8:D5:9D:6A:E7:9E:F3:70:F1:4B:29:65:A8:13:E6:9D:FA:2D
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 019E1D90D137C7CE6A625753BBA4265E89B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 07F5
Signing time: Tue 12 May 2026 19:01:30 +0000
Manifest this update: Tue 12 May 2026 19:01:30 +0000
Manifest next update: Wed 13 May 2026 19:01:30 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: IbNE2ndmxbAA6vg4oqN52Z0h6YfNQ9Sc8aNLhi9EkUs=)
2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d1:37:c7:ce:6a:62:57:53:bb:a4:26:5e:89:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: May 12 19:01:30 2026 GMT
Not After : May 13 19:01:30 2026 GMT
Subject: CN=1a53a8d59d6ae79ef370f14b2965a813e69dfa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:c5:b0:54:95:13:6f:fd:38:45:41:2e:51:
7b:09:f7:12:b8:4b:30:fb:2e:c6:e9:c1:33:ca:ef:
76:d3:96:6d:01:0b:93:61:64:71:75:3d:b7:e6:55:
6f:c6:44:43:71:a9:52:7f:64:4f:91:00:ac:bd:d3:
0f:28:17:86:c1:1f:26:24:d8:c7:ac:39:09:f4:d8:
ac:b3:14:0f:28:0a:71:b6:4b:3b:70:d9:c9:0c:99:
99:46:ef:d7:b9:8d:60:1e:d9:9c:82:76:4d:af:21:
1f:48:7b:f9:70:00:47:f8:36:66:7c:94:67:94:c6:
3e:e3:e8:41:ab:37:b0:e2:69:49:34:e2:cc:44:81:
1e:b7:c7:cf:5c:49:0d:b2:29:22:1a:3e:a9:03:b8:
2e:77:4b:1e:25:4d:3d:a6:36:50:d2:16:fd:f3:db:
6a:fc:66:b8:eb:9f:01:88:2e:c9:59:8d:50:40:4f:
77:67:60:24:f2:1e:64:4b:1f:2d:43:b7:e0:0a:d6:
0b:f4:96:5e:f0:30:c0:c7:1a:44:65:9d:93:f9:41:
29:21:5d:93:7b:a6:53:e9:1f:a0:94:c8:07:3e:90:
92:fd:82:4f:60:35:ec:f5:3e:fa:3c:a6:76:05:0a:
e6:95:7f:cd:25:e1:ee:45:b6:35:47:6d:0c:46:63:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:A8:D5:9D:6A:E7:9E:F3:70:F1:4B:29:65:A8:13:E6:9D:FA:2D
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d6:6e:78:48:10:1f:c7:51:70:b9:6a:f7:b5:30:96:9f:8b:
f5:60:d9:cd:94:bd:82:f0:07:10:fe:e6:af:eb:89:bf:1f:d2:
ce:02:f3:69:d4:ed:57:15:2f:e1:1b:00:61:5e:c3:7d:64:29:
e7:f3:aa:0e:bb:c2:0d:4a:25:20:9a:39:72:62:eb:7f:ab:5e:
47:09:1b:c2:23:10:06:eb:a2:4e:aa:2e:40:87:06:e7:c2:1c:
45:01:9d:ba:93:a1:1f:4d:fb:17:ef:d5:d1:24:46:ce:37:b4:
0d:68:5d:59:48:ed:8a:c4:b1:bf:26:5c:05:66:c4:14:d4:ab:
8e:14:d8:59:9a:88:fe:bc:9b:02:2f:e1:cd:f4:3b:a6:e5:ca:
8c:1d:3c:23:6b:5a:1b:0b:40:8b:43:65:b1:72:7e:52:05:75:
da:05:74:ee:61:b6:4d:69:62:ca:a2:fd:57:41:33:d6:97:32:
e4:89:d4:96:62:6e:1b:b1:04:e3:50:50:7f:69:34:a5:7f:11:
36:b0:b9:7a:d2:49:f2:6a:1a:11:c7:33:f3:e9:b8:19:80:5c:
c1:f3:02:a1:ae:a5:69:a8:60:e6:8e:14:2c:1a:9e:8e:88:2f:
a7:db:74:51:ab:02:0a:b1:06:44:81:54:f7:38:c9:58:4c:f4:
a1:7e:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:45 2026 by rpki-client