Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: 0CYSpLpgtQzFMFBra2SZcA3h6Lu5MGK8OVJO9BtZi00=
Subject key identifier: D2:51:3D:16:15:93:DC:EE:F1:AB:E6:F2:7E:DD:FC:A0:7A:2B:EB:7E
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019E1FEC80E8D5BDAEA31B9960B0A04684CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 033C
Signing time: Wed 13 May 2026 06:00:53 +0000
Manifest this update: Wed 13 May 2026 06:00:53 +0000
Manifest next update: Thu 14 May 2026 06:00:53 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: 0O/EI6HsgFBn06reDGB4Jongh5U/AIq8Xmgx6yKKBsw=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:80:e8:d5:bd:ae:a3:1b:99:60:b0:a0:46:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: May 13 06:00:53 2026 GMT
Not After : May 14 06:00:53 2026 GMT
Subject: CN=d2513d161593dceef1abe6f27eddfca07a2beb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:5b:87:ef:c3:9a:ec:a0:71:24:8b:53:52:
57:74:57:91:bb:47:8d:06:6c:ad:f0:c3:c9:53:96:
48:95:4c:a4:a6:90:16:38:4e:d6:b7:75:96:11:43:
dc:dd:e4:ed:75:00:74:71:94:39:19:11:e9:8f:24:
28:85:5b:df:0a:ab:ce:cd:2a:28:ce:4c:05:b4:a8:
29:26:b8:8f:f3:41:b0:54:ba:ac:b9:12:81:ba:30:
e2:5f:23:c4:4a:25:c6:43:d8:76:04:d7:e3:54:32:
a2:55:fa:5f:5a:88:0c:d5:ef:d1:a2:c4:33:d9:90:
5e:3c:6e:41:1f:67:5c:4f:5a:72:7a:58:4b:65:8a:
cd:77:84:3f:5b:01:40:c3:df:36:32:01:c4:c5:d6:
35:55:36:83:77:ff:8d:3a:c0:6f:10:e5:c3:14:54:
4d:47:b3:c3:dd:f7:f7:e8:7a:d8:07:d0:d2:2d:10:
f1:b9:88:45:af:e4:a3:e5:04:b2:6c:e2:fb:92:51:
73:20:15:2a:1f:0d:76:cb:8d:1a:6d:9b:97:3e:31:
1f:db:5c:c9:20:6e:10:c9:80:6d:49:89:5e:3e:2a:
b1:31:af:1a:34:aa:eb:26:de:65:5a:3c:b2:5c:cd:
11:97:a5:23:45:f9:b1:f4:76:6f:44:f5:2d:74:18:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:3D:16:15:93:DC:EE:F1:AB:E6:F2:7E:DD:FC:A0:7A:2B:EB:7E
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8b:57:e3:2c:5d:9e:41:d6:b2:17:1e:ae:ec:d1:dc:a8:02:
59:d8:20:4e:8f:1e:a3:18:cb:d2:4e:58:59:33:5c:c1:05:c0:
58:de:92:6b:80:25:07:22:e0:48:7f:22:7f:8e:60:90:3f:6f:
1e:9f:cd:0b:01:4b:84:5b:c3:55:f0:a1:f0:f1:ee:36:d6:c3:
50:a5:58:cf:f7:b9:03:93:3c:42:90:cb:e1:fe:d6:ae:08:1b:
09:28:7a:b5:42:3e:38:6e:13:5e:ba:17:6a:14:01:5e:07:c5:
07:d4:16:cf:ef:08:3a:c2:40:2b:d7:91:11:ec:96:39:a5:62:
4f:85:4d:5d:b5:df:58:59:a7:a4:9d:eb:95:a0:d2:d1:72:b7:
2f:1f:6d:b9:af:62:1a:5e:ba:06:3b:cd:49:e4:28:68:71:37:
3e:7e:99:bb:9d:fe:99:bc:a7:ea:64:3a:b0:83:2f:21:17:97:
6b:1d:75:e4:1b:b0:3f:fe:fe:a0:59:89:a5:f1:69:57:3c:d4:
02:86:4f:32:fc:d5:50:e3:19:19:64:0e:db:88:84:54:e9:8c:
90:a8:c5:2b:e8:88:2c:a0:1e:7b:25:e2:57:14:3b:25:62:d8:
ef:64:91:7d:9f:c3:c2:9c:26:57:29:34:d2:5e:49:10:17:04:
6e:98:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:35 2026 by rpki-client