Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: H5FGSs47/l/pcFvn/eH+JrJgRB9d2i5G2HZuInzWvNw=
Subject key identifier: 22:CD:8E:F2:77:1B:31:3E:C5:23:4C:AF:78:12:9B:77:78:2F:CA:A9
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019E1C7D6B5177445522D47C8A1951DEBC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0EB1
Signing time: Tue 12 May 2026 14:00:41 +0000
Manifest this update: Tue 12 May 2026 14:00:41 +0000
Manifest next update: Wed 13 May 2026 14:00:41 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: gD+JwvKQUjhA5bP70VCE+kokbOEe5qh6gPh1ymqebDs=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:6b:51:77:44:55:22:d4:7c:8a:19:51:de:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: May 12 14:00:41 2026 GMT
Not After : May 13 14:00:41 2026 GMT
Subject: CN=22cd8ef2771b313ec5234caf78129b77782fcaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:46:dc:d8:f8:a7:b4:29:9b:5d:d4:73:6a:
35:44:ac:46:1d:26:d4:81:6f:4e:ee:e9:59:e4:1d:
81:dd:16:24:dc:31:e3:44:5d:11:90:d3:0b:9c:b9:
f3:88:9f:7d:e5:07:38:80:b5:6c:7c:7a:19:24:c9:
32:ed:22:0b:d0:6d:eb:3b:84:58:ef:7f:c2:66:d9:
af:14:16:63:b3:4c:17:58:0e:7a:b3:47:17:04:e2:
19:02:8b:30:2f:fc:ff:06:44:83:c1:bf:24:97:a4:
b5:8e:d5:bc:5b:38:ce:70:df:03:3d:ce:07:ac:ba:
a5:73:58:ea:a6:b0:f5:1e:d1:4a:43:83:5c:1b:c0:
12:d2:96:9a:25:d6:b2:9c:1e:13:ab:17:46:1e:97:
63:2c:3f:b2:b6:38:a7:63:4c:c4:01:fb:ac:42:42:
1f:e5:50:24:e1:85:4f:42:a6:db:a6:57:2c:0a:6e:
5c:26:c9:92:d1:81:bc:3f:38:ef:05:1a:57:0f:00:
23:71:4b:32:a8:1b:3f:91:c0:b5:37:fb:f3:86:da:
59:4e:3c:15:aa:ab:9d:08:e7:56:06:03:0c:3e:aa:
b5:b2:f6:ac:8a:27:1a:c5:be:48:b3:73:9a:20:84:
b5:3a:6a:8b:e0:77:fd:99:76:a9:e6:7b:b8:19:b8:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CD:8E:F2:77:1B:31:3E:C5:23:4C:AF:78:12:9B:77:78:2F:CA:A9
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:ca:74:39:fe:34:6f:23:82:eb:9e:1e:14:a6:1a:d7:d5:
a1:ae:3c:c5:24:19:4f:b1:1d:81:83:f2:73:46:d1:c6:74:8e:
d6:69:59:2c:50:80:99:2e:ae:42:d9:c0:6c:2f:5b:e0:f1:f0:
33:53:cf:9e:a7:03:0c:9a:04:f6:07:87:82:35:63:ec:b9:c8:
fd:25:df:f0:90:62:1a:7a:14:57:d5:07:8c:0d:3c:d6:8f:67:
d3:c8:96:2a:cc:41:20:18:19:69:c1:57:5d:63:d5:19:3a:82:
cd:95:4a:93:9e:40:20:31:69:11:3e:c3:a4:2a:ec:4b:46:fc:
f7:ad:06:15:73:65:2e:8a:80:38:33:e3:d6:28:b9:f6:0f:f3:
c4:2c:a8:75:1c:f9:c3:88:fd:5d:93:2e:cb:6f:a7:28:3a:38:
bf:d2:09:7f:e8:a9:aa:31:1d:aa:0d:f8:23:ff:a2:9a:d1:41:
be:b5:c2:bc:31:a6:a0:d4:6c:59:f9:86:fb:63:17:cb:2a:c2:
1f:34:cb:85:5f:e3:27:46:3f:78:94:b5:37:09:03:a1:7f:94:
24:e6:5c:76:2f:8d:be:f6:ec:20:3e:8c:f0:5a:57:c5:79:dc:
3a:6c:c9:78:80:f0:61:89:3a:13:27:fd:df:86:cc:97:c5:82:
f2:4c:91:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfWtRd0RVItR8ihlR3rwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjYwNTEyMTQwMDQxWhcNMjYwNTEzMTQwMDQxWjAzMTEwLwYDVQQD
EygyMmNkOGVmMjc3MWIzMTNlYzUyMzRjYWY3ODEyOWI3Nzc4MmZjYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsJG3Nj4p7Qpm13Uc2o1RKxGHSbU
gW9O7ulZ5B2B3RYk3DHjRF0RkNMLnLnziJ995Qc4gLVsfHoZJMky7SIL0G3rO4RY
73/CZtmvFBZjs0wXWA56s0cXBOIZAoswL/z/BkSDwb8kl6S1jtW8WzjOcN8DPc4H
rLqlc1jqprD1HtFKQ4NcG8AS0paaJdaynB4TqxdGHpdjLD+ytjinY0zEAfusQkIf
5VAk4YVPQqbbplcsCm5cJsmS0YG8PzjvBRpXDwAjcUsyqBs/kcC1N/vzhtpZTjwV
qqudCOdWBgMMPqq1svasiicaxb5Is3OaIIS1OmqL4Hf9mXap5nu4Gbh1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLNjvJ3GzE+xSNMr3gSm3d4L8qpMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1rKdDn+
NG8jguueHhSmGtfVoa48xSQZT7EdgYPyc0bRxnSO1mlZLFCAmS6uQtnAbC9b4PHw
M1PPnqcDDJoE9geHgjVj7LnI/SXf8JBiGnoUV9UHjA081o9n08iWKsxBIBgZacFX
XWPVGTqCzZVKk55AIDFpET7DpCrsS0b8960GFXNlLoqAODPj1ii59g/zxCyodRz5
w4j9XZMuy2+nKDo4v9IJf+ipqjEdqg34I/+imtFBvrXCvDGmoNRsWfmG+2MXyyrC
HzTLhV/jJ0Y/eJS1NwkDoX+UJOZcdi+NvvbsID6M8FpXxXncOmzJeIDwYYk6Eyf9
34bMl8WC8kyRHQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:59:00 2026 by rpki-client