Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: Ty3X36pxMPlLwTKR0G0vTWlYoWJsbILPkscs1o0o74g=
Subject key identifier: 76:56:A9:7D:E4:39:B6:F4:52:31:79:04:38:2C:64:BB:FB:D7:85:31
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019E1D90A81F0ADA76B9EC975B661719A7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0E13
Signing time: Tue 12 May 2026 19:01:19 +0000
Manifest this update: Tue 12 May 2026 19:01:19 +0000
Manifest next update: Wed 13 May 2026 19:01:19 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: PQ6KeeCj+sU/DUVMqSKzTdRAusCHxyNk4/HmrhKdYhE=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a8:1f:0a:da:76:b9:ec:97:5b:66:17:19:a7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: May 12 19:01:19 2026 GMT
Not After : May 13 19:01:19 2026 GMT
Subject: CN=7656a97de439b6f452317904382c64bbfbd78531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:15:f6:da:f1:d1:03:c4:05:65:42:64:87:
2e:29:1a:3e:d9:61:ba:7f:1c:da:c3:68:50:2c:e0:
1d:66:a6:99:08:82:de:44:68:c0:9c:da:2f:18:86:
e4:eb:0c:1d:96:be:53:88:a0:06:64:19:2d:f8:dd:
b7:71:22:5f:65:93:2b:51:83:43:9b:66:32:1e:9b:
d7:00:7c:05:e6:ff:19:1b:10:a7:a5:38:25:51:f5:
f8:f1:86:5d:84:a3:6a:21:31:f7:07:0e:95:8e:fb:
ab:17:33:ff:3b:0a:f0:93:b2:ad:84:aa:51:43:e4:
c3:14:3e:ec:41:2a:e4:e4:ab:15:0c:0e:6d:68:15:
f1:af:9d:3b:06:0e:77:50:df:5b:87:61:a0:98:2f:
eb:df:0d:48:fc:5b:db:06:6c:e0:41:3d:a2:8b:16:
5e:45:49:65:04:c8:d8:e6:98:e4:59:fd:fa:6c:6d:
18:7f:3d:23:35:9a:42:7b:4d:e8:3d:09:07:e9:db:
1a:8a:6a:3b:85:1d:f6:63:1e:c2:73:df:3a:81:ca:
aa:7d:04:b5:f6:8b:67:b3:ff:c5:a5:8b:cb:dc:bb:
58:97:45:64:41:1e:c8:7a:9c:0e:ee:d8:3d:bc:e7:
2f:9d:f3:b6:d7:47:0a:5d:1c:8b:a8:8b:cc:ef:f9:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:A9:7D:E4:39:B6:F4:52:31:79:04:38:2C:64:BB:FB:D7:85:31
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a6:73:1c:5e:48:65:dc:aa:63:3c:39:bd:39:4d:91:00:12:
f6:60:d7:30:86:3a:8d:15:77:23:39:31:d2:ae:9b:16:d8:3c:
a9:bf:87:bb:a4:a7:5a:12:c3:7b:62:55:81:91:74:c4:39:86:
3c:53:e3:55:6f:a4:17:69:86:98:d3:01:0f:1e:c5:a0:3d:73:
ad:48:5e:4c:5f:6b:a3:ab:2c:72:33:dc:85:f4:49:e1:02:23:
f6:e6:bc:22:7e:23:33:da:32:2b:83:a2:33:86:c8:20:80:7c:
aa:11:1f:90:11:bb:02:86:79:da:2c:1b:21:92:9c:95:aa:cc:
73:58:fd:42:4d:1a:9c:54:34:16:0c:b9:06:96:b2:0d:8e:1e:
32:0e:4e:fd:5a:55:f2:e5:a4:0f:bf:eb:7b:fb:f2:f7:bb:42:
6b:ca:20:08:ab:66:95:05:51:ea:ee:fc:95:ae:84:4d:97:d9:
58:5a:90:6c:d2:98:6b:23:a6:74:af:bf:74:2e:ad:91:40:e3:
5f:d6:5a:c5:ab:30:48:70:f6:64:a7:d0:1f:ac:01:d8:44:b9:
5d:30:5c:df:db:f8:a2:e9:76:66:7a:79:ea:56:7f:cd:1c:a8:
03:e2:a4:66:dc:2a:89:b0:78:50:be:c8:cc:9f:35:6b:2b:96:
35:84:6a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKgfCtp2ueyXW2YXGaeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw
OTQwNzkwHhcNMjYwNTEyMTkwMTE5WhcNMjYwNTEzMTkwMTE5WjAzMTEwLwYDVQQD
Eyg3NjU2YTk3ZGU0MzliNmY0NTIzMTc5MDQzODJjNjRiYmZiZDc4NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub4V9trx0QPEBWVCZIcuKRo+2WG6
fxzaw2hQLOAdZqaZCILeRGjAnNovGIbk6wwdlr5TiKAGZBkt+N23cSJfZZMrUYND
m2YyHpvXAHwF5v8ZGxCnpTglUfX48YZdhKNqITH3Bw6VjvurFzP/Owrwk7KthKpR
Q+TDFD7sQSrk5KsVDA5taBXxr507Bg53UN9bh2GgmC/r3w1I/FvbBmzgQT2iixZe
RUllBMjY5pjkWf36bG0Yfz0jNZpCe03oPQkH6dsaimo7hR32Yx7Cc986gcqqfQS1
9otns//FpYvL3LtYl0VkQR7IepwO7tg9vOcvnfO210cKXRyLqIvM7/nSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZWqX3kObb0UjF5BDgsZLv714UxMB8GA1UdIwQY
MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt
Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk
LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqZzHF5I
ZdyqYzw5vTlNkQAS9mDXMIY6jRV3Izkx0q6bFtg8qb+Hu6SnWhLDe2JVgZF0xDmG
PFPjVW+kF2mGmNMBDx7FoD1zrUheTF9ro6sscjPchfRJ4QIj9ua8In4jM9oyK4Oi
M4bIIIB8qhEfkBG7AoZ52iwbIZKclarMc1j9Qk0anFQ0Fgy5BpayDY4eMg5O/VpV
8uWkD7/re/vy97tCa8ogCKtmlQVR6u78la6ETZfZWFqQbNKYayOmdK+/dC6tkUDj
X9ZaxaswSHD2ZKfQH6wB2ES5XTBc39v4oul2Znp56lZ/zRyoA+KkZtwqibB4UL7I
zJ81ayuWNYRqNA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:14 2026 by rpki-client