Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: PCTVLirHLehIn4zsUQkd7PilyL4M+fvvufT9lW2CdGw=
Subject key identifier: 37:85:63:64:24:C4:89:A0:A1:70:5B:07:FE:57:C2:7C:DE:1A:E5:78
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019E1E35EABCBD456F93CD23542D0CC98464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:01:50 +0000
Manifest this update: Tue 12 May 2026 22:01:50 +0000
Manifest next update: Wed 13 May 2026 22:01:50 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: HOAsavUDpjwWaKXSdPTLCSpYh88VrWnmqP4w2JWtmMM=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ea:bc:bd:45:6f:93:cd:23:54:2d:0c:c9:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: May 12 22:01:50 2026 GMT
Not After : May 13 22:01:50 2026 GMT
Subject: CN=3785636424c489a0a1705b07fe57c27cde1ae578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:dc:c7:1f:6b:5c:fa:0a:b8:41:34:a8:20:
47:b0:bd:f1:d6:cc:0b:14:39:1b:e8:c8:85:11:40:
d3:48:ac:8f:88:30:0d:b8:54:bf:65:47:4f:85:68:
78:b5:3d:45:06:af:04:30:73:f8:0d:a1:13:7d:df:
d5:2d:0c:83:f8:4c:5f:de:a1:84:94:f0:e7:66:1d:
f9:e5:41:82:65:4f:c0:63:c1:31:dc:4e:50:70:e4:
52:16:ae:e3:13:cc:08:62:f3:3a:d0:33:36:70:8b:
07:e9:2d:f2:7b:61:bb:5d:de:7b:5c:8c:0e:0a:87:
f0:3f:1f:56:9b:24:76:61:87:1e:4b:ac:97:bd:c0:
e5:a2:e4:a6:54:07:91:d1:89:d0:53:37:8d:82:0a:
45:32:1a:8e:f6:11:5a:30:60:b0:62:41:d0:02:33:
e5:bd:44:ec:d1:2a:0f:a1:fd:f5:21:c9:ee:a1:7b:
a8:5d:73:de:cc:09:54:2c:8a:9b:f0:ba:e1:21:38:
d2:88:5d:39:45:3f:c8:c4:6a:0c:40:5e:83:55:73:
91:d0:32:c4:ec:9e:cd:e3:8d:56:94:81:01:6b:a2:
b9:1e:9a:e0:64:c9:45:cb:72:f9:d3:86:61:34:e7:
2d:e4:c3:88:79:4a:35:49:b4:43:99:68:d8:77:f6:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:63:64:24:C4:89:A0:A1:70:5B:07:FE:57:C2:7C:DE:1A:E5:78
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ff:61:a9:ed:6b:42:51:3a:57:55:3c:ad:da:2e:ed:03:ab:
b8:8d:1c:f3:8f:ac:5b:ac:b3:5b:8f:06:6f:13:c6:91:f4:78:
90:f8:d2:5c:f5:15:5b:ab:db:c9:76:c7:45:b9:0b:25:20:f0:
ea:e3:86:52:9a:ee:ca:f5:3f:f5:47:8b:a0:29:bb:42:30:ec:
7a:76:91:06:a2:1e:e0:80:d5:95:0d:23:8a:5b:dd:d0:86:a2:
78:a4:7f:37:e7:bd:b6:9b:a8:1a:4f:2d:7c:17:65:be:1c:a9:
08:66:c3:c4:d5:4d:31:b9:55:a4:6e:4d:c0:36:fd:ac:84:b7:
a4:31:49:56:0b:f9:36:a7:79:a7:db:37:fc:a5:6c:97:21:db:
b2:58:f1:3d:fb:c4:d3:75:0b:02:ad:16:0b:cc:12:41:a9:49:
ff:d2:e5:5e:fa:77:ed:9d:1f:60:c5:cb:27:fe:c7:c5:00:c5:
3f:86:1d:d4:e4:58:db:48:61:c5:1f:7a:3f:9f:cc:35:6a:91:
36:97:ae:99:52:f3:d4:58:48:e2:47:f8:6d:1b:73:05:42:03:
46:5d:e9:8d:b3:77:21:cf:6a:f2:bb:a4:e1:2a:96:eb:c8:df:
f2:b1:bb:33:5a:5f:61:09:dc:90:f7:36:1a:d9:04:32:76:7a:
a8:e2:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:21 2026 by rpki-client