Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: HfG03sVFb5hobIu1S+VltlFUsLjQmcGt3Vyiu0mTlyQ=
Subject key identifier: 3A:D9:38:ED:7F:6A:F6:13:6C:F7:AC:64:58:CA:D9:52:71:4E:44:F9
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 019E1D59BA6D88077474F831A10CD07D7668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 18:01:20 +0000
Manifest this update: Tue 12 May 2026 18:01:20 +0000
Manifest next update: Wed 13 May 2026 18:01:20 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: yAhwZ2EKMUkgyfX4lU7KIIa8xKPsW48eJ/6k4OrSp70=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ba:6d:88:07:74:74:f8:31:a1:0c:d0:7d:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: May 12 18:01:20 2026 GMT
Not After : May 13 18:01:20 2026 GMT
Subject: CN=3ad938ed7f6af6136cf7ac6458cad952714e44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:83:5d:3b:a1:61:23:ee:b9:5c:fc:99:82:
c7:19:98:f8:08:98:f1:d0:ea:ab:60:29:8e:85:2f:
8e:27:87:75:88:70:9a:5a:c4:c8:c7:77:89:de:31:
b9:25:87:9a:50:ca:b6:47:c4:dc:b4:5f:a2:11:80:
84:aa:84:ea:52:62:46:ab:11:d6:1d:a7:f4:07:b5:
1c:58:2b:e2:8e:6c:9e:30:67:7b:fc:04:25:a3:6e:
73:94:45:86:e0:30:20:f2:dd:10:0a:bf:c0:6c:4d:
7a:59:4a:d9:ab:fb:d0:5c:aa:d2:71:6e:3e:13:27:
25:05:5f:9d:b3:33:da:c2:cd:2f:f3:8f:57:ee:d1:
e0:ea:bc:51:da:0e:f5:9b:0a:aa:46:46:9b:3f:0c:
31:f8:b6:5d:6f:48:e2:41:ef:f7:cb:f0:4d:ad:37:
c6:63:22:98:45:7c:b3:22:fd:e1:0a:91:06:92:3e:
ca:69:f0:a0:3b:28:93:96:74:76:ed:0f:58:8e:62:
f0:22:0b:ab:4c:7d:ce:f4:78:5f:ef:7c:64:52:a0:
e0:e1:cb:35:ab:f3:81:14:ca:91:45:1c:98:82:b7:
f7:7e:3a:95:ca:3a:1c:ca:85:fe:9a:e9:1b:2d:88:
5c:5d:e3:8e:e1:a9:9d:2b:38:16:da:ac:d6:5b:68:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:38:ED:7F:6A:F6:13:6C:F7:AC:64:58:CA:D9:52:71:4E:44:F9
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:5d:df:07:3a:d0:32:be:87:2c:53:c2:62:34:e3:90:40:
0b:95:69:cc:71:9c:25:c5:1a:fd:ea:3e:36:a7:20:e8:c3:de:
d5:72:64:d0:b1:27:b0:4d:26:7d:6f:ad:48:55:48:d8:b2:5b:
3b:23:33:87:66:b9:6a:47:ac:2b:2e:9d:d1:30:7d:16:82:c9:
34:0d:f7:a6:5d:1a:c7:31:65:ef:d4:41:34:8f:ca:e9:17:e7:
73:ae:3e:32:79:8e:68:90:fa:9f:c5:d0:7d:5f:2f:56:96:0f:
b3:3f:12:46:f3:a0:af:6b:cf:91:21:c1:4e:e1:83:94:d7:c2:
3f:12:f7:4c:d7:ad:d2:6d:c7:4c:63:31:dd:98:68:a2:b0:52:
46:1d:9b:91:ed:02:7b:92:dd:19:3d:a8:7d:36:6f:49:9d:c6:
4b:14:77:f2:4c:7b:f6:9b:0f:9e:11:f6:42:df:40:17:3c:74:
9a:1d:3f:45:2f:73:93:97:b8:c8:0f:a2:25:a9:67:be:2e:0f:
1b:00:5c:84:b7:4c:a0:cc:97:6b:e4:f8:fd:4f:2e:f0:1c:bf:
da:c4:e3:91:40:c3:88:6e:5d:18:e6:49:9e:25:06:ca:17:b6:
28:89:3c:09:e0:5d:9f:eb:5a:6c:fc:f4:60:06:4c:00:b9:3a:
8f:21:1c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWbptiAd0dPgxoQzQfXZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjYwNTEyMTgwMTIwWhcNMjYwNTEzMTgwMTIwWjAzMTEwLwYDVQQD
EygzYWQ5MzhlZDdmNmFmNjEzNmNmN2FjNjQ1OGNhZDk1MjcxNGU0NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhyDXTuhYSPuuVz8mYLHGZj4CJjx
0OqrYCmOhS+OJ4d1iHCaWsTIx3eJ3jG5JYeaUMq2R8TctF+iEYCEqoTqUmJGqxHW
Haf0B7UcWCvijmyeMGd7/AQlo25zlEWG4DAg8t0QCr/AbE16WUrZq/vQXKrScW4+
EyclBV+dszPaws0v849X7tHg6rxR2g71mwqqRkabPwwx+LZdb0jiQe/3y/BNrTfG
YyKYRXyzIv3hCpEGkj7KafCgOyiTlnR27Q9YjmLwIgurTH3O9Hhf73xkUqDg4cs1
q/OBFMqRRRyYgrf3fjqVyjocyoX+mukbLYhcXeOO4amdKzgW2qzWW2ihZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrZOO1/avYTbPesZFjK2VJxTkT5MB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr5d3wc6
0DK+hyxTwmI045BAC5VpzHGcJcUa/eo+Nqcg6MPe1XJk0LEnsE0mfW+tSFVI2LJb
OyMzh2a5akesKy6d0TB9FoLJNA33pl0axzFl79RBNI/K6Rfnc64+MnmOaJD6n8XQ
fV8vVpYPsz8SRvOgr2vPkSHBTuGDlNfCPxL3TNet0m3HTGMx3ZhoorBSRh2bke0C
e5LdGT2ofTZvSZ3GSxR38kx79psPnhH2Qt9AFzx0mh0/RS9zk5e4yA+iJalnvi4P
GwBchLdMoMyXa+T4/U8u8By/2sTjkUDDiG5dGOZJniUGyhe2KIk8CeBdn+tabPz0
YAZMALk6jyEciA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:28 2026 by rpki-client