Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: c/NH55huS4GC2cP0J9YRqqnnroS+SbcDv5m9f8MIPxo=
Subject key identifier: 1B:17:09:59:CA:C8:23:66:82:E5:B6:C5:9C:AC:9F:17:F3:17:CC:01
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019E1D906D69D8F3B1277ACECC47C288A301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Wed 13 May 2026 19:01:04 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: TeBStGBSrEG9W9tna0oHGeOAexzCKAEDhPHEnj0W0xI=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6d:69:d8:f3:b1:27:7a:ce:cc:47:c2:88:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 13 19:01:04 2026 GMT
Subject: CN=1b170959cac8236682e5b6c59cac9f17f317cc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:38:76:d6:11:e7:67:56:32:31:ef:83:71:
ef:e1:44:b3:3f:79:37:22:e9:bc:80:3b:76:9f:1c:
1b:30:b2:cf:8a:c1:db:c1:0b:39:0d:da:0f:db:db:
44:f3:1f:3a:bb:d6:e2:75:a3:53:b2:a1:5e:46:bd:
59:d7:b1:d2:21:02:6a:b7:66:f3:9b:62:0a:84:a0:
3b:07:e9:5a:63:26:47:fd:d3:54:46:9e:d4:2b:07:
31:76:87:d6:1e:e9:bc:e4:80:a7:22:09:7e:83:4f:
55:ef:bc:08:d7:b7:b0:c4:da:f2:95:c3:31:cc:4b:
eb:93:36:ed:6d:44:ae:ac:7b:a5:de:46:06:f2:2d:
96:56:03:6a:08:c6:39:45:d9:7e:55:5b:4e:ae:43:
30:9d:55:17:65:4b:a5:c0:3e:89:d9:6c:91:8d:b2:
08:e6:30:09:cb:93:44:b9:4f:f3:cd:88:12:74:39:
11:4a:c0:69:5d:9a:e4:c1:aa:de:ee:22:73:12:6e:
37:8c:cd:74:12:57:4d:9a:9b:b7:9c:35:11:7c:df:
6f:c6:e7:30:cb:55:c3:b6:55:a0:11:91:6e:47:e0:
e8:65:54:1e:94:aa:a1:eb:c5:62:a4:d4:e6:9f:13:
47:7d:06:01:d7:49:37:34:92:3c:05:02:70:14:81:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:09:59:CA:C8:23:66:82:E5:B6:C5:9C:AC:9F:17:F3:17:CC:01
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:7c:f0:01:f6:33:cc:1b:d7:01:de:2f:d1:1f:a1:94:9f:
9a:2e:5f:e0:f1:02:74:aa:82:02:6d:cf:0d:89:3b:cb:b0:a4:
a2:87:5a:18:11:f9:4a:f9:84:ec:5f:ce:0c:8b:0b:f2:7f:a5:
16:f1:f2:4a:50:6f:70:0b:e4:d4:05:a6:1d:ac:ed:4e:1f:79:
14:dd:5f:cd:f2:55:95:5b:d2:fa:2c:77:2d:7e:30:de:87:fc:
0b:35:65:ed:e2:5c:36:61:57:a2:36:0e:37:80:91:cb:5c:a0:
08:8d:c9:78:65:64:5e:3f:33:32:62:d2:61:c1:56:db:57:d9:
18:c3:af:b1:69:63:01:fc:5c:26:63:89:dd:9c:e7:64:69:64:
d4:49:15:2a:30:a8:c0:a2:7e:47:c7:a7:1b:a0:d5:ba:a7:6b:
20:19:4b:65:f1:ec:b3:10:52:bf:20:f3:28:5e:c5:ac:70:52:
f9:a1:09:7d:ae:a5:e7:c1:d9:1a:09:e7:3c:ef:c4:81:12:e4:
af:67:6c:49:2f:ac:56:df:69:3e:02:f8:1f:d6:b8:74:de:b6:
19:fe:88:fb:df:07:4c:8b:bf:71:0d:60:ea:98:10:86:a3:ec:
8c:1d:2c:f3:b0:66:8e:db:93:c9:a7:a2:a0:17:c6:a6:1b:cd:
97:ca:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:45 2026 by rpki-client