Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: emVsyNrAFgJFLGlGTYod8Nkp/PAU9hWiIeWK9i1heDs=
Subject key identifier: EB:0C:BF:78:BE:7C:14:5C:83:DD:34:07:75:C5:7B:A2:A8:C3:77:6A
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019E1D22F4E939800FB130D1BFD17C87EFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1439
Signing time: Tue 12 May 2026 17:01:30 +0000
Manifest this update: Tue 12 May 2026 17:01:30 +0000
Manifest next update: Wed 13 May 2026 17:01:30 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: b5fyoEdx2smdXVho4UB7jBjSh9mTJvEqIZ8zKWM1+ec=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f4:e9:39:80:0f:b1:30:d1:bf:d1:7c:87:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: May 12 17:01:30 2026 GMT
Not After : May 13 17:01:30 2026 GMT
Subject: CN=eb0cbf78be7c145c83dd340775c57ba2a8c3776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:2b:73:72:67:8a:e9:a0:50:cb:6d:07:b9:
48:70:6e:1a:52:5f:cd:9c:f7:31:2d:d3:81:96:86:
f8:29:6f:20:04:48:c3:d4:8f:9f:23:a6:59:1c:47:
74:c4:80:79:70:a4:0b:c9:3b:c7:41:fb:2c:c1:e2:
d6:f7:08:1b:ec:fe:ff:fa:ba:1d:43:1b:48:27:a0:
3f:82:94:ab:d8:35:1f:70:d4:7c:c6:c1:52:77:3f:
c3:81:7b:14:16:19:a4:b8:0a:d2:e8:a0:da:d0:fd:
e4:7c:03:a1:ec:7f:d9:1a:95:c3:91:24:fa:62:cd:
89:2f:70:04:69:d1:3b:34:6b:d6:e6:76:66:9e:81:
86:81:92:83:ed:cd:61:03:74:b9:8c:bb:7d:b4:a1:
fd:d4:e5:d2:7d:c6:50:f4:6f:fe:82:2a:0c:99:f6:
6b:e2:70:ce:28:f2:55:09:6d:fc:5a:2f:ca:78:7f:
06:27:ad:2e:1b:af:eb:b4:cc:fc:cb:86:c0:9b:ca:
b0:20:fa:40:45:42:86:ea:47:0f:ae:55:3d:73:5f:
0a:73:d7:28:fe:6f:29:eb:36:61:26:be:6e:be:c3:
1d:cb:14:cc:96:bc:83:01:4c:a6:46:6b:bf:12:c6:
ee:80:6a:de:8a:a9:1c:7f:73:b5:56:5f:3f:e9:9b:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:BF:78:BE:7C:14:5C:83:DD:34:07:75:C5:7B:A2:A8:C3:77:6A
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:52:a9:fb:4d:43:0c:3e:aa:ec:2c:1f:de:a2:67:23:52:
3e:36:6b:92:56:f8:7c:cb:d6:20:bd:b4:0a:25:ff:30:87:90:
70:89:0e:ae:e5:3a:80:c7:b6:9b:25:1e:94:fc:83:11:ab:12:
c9:e5:b6:83:b8:b9:89:e0:6d:9c:83:41:1f:ad:83:b2:1c:fc:
b9:cb:4b:cd:e0:87:2c:da:a1:5b:12:21:e1:74:91:c4:ce:e0:
dd:39:9a:fd:e8:25:25:22:24:2d:c4:f5:18:ce:48:2e:74:36:
ea:fa:2b:33:c5:70:57:33:0a:3f:09:87:74:6d:74:1d:2a:45:
0c:72:7b:e8:fc:45:dc:28:4d:9c:b6:75:68:e3:ed:f1:b5:0c:
c6:7f:25:e4:20:d1:14:44:16:ae:d7:96:4d:3c:b2:c4:dd:f0:
c0:60:73:95:14:25:cc:e6:da:d4:b7:85:c0:c4:75:1b:1c:a8:
c1:39:58:d0:66:a1:3f:7e:8f:aa:e9:a9:3b:c7:a0:3c:57:05:
61:05:f3:aa:52:9b:fe:11:b1:bf:cb:77:55:bf:3c:6b:01:7d:
df:51:fa:bf:41:c0:b2:22:4d:c4:b6:8b:6e:b3:b6:d3:9b:ee:
fd:b6:30:28:97:ec:48:e3:f6:ec:f9:cf:45:1d:88:5a:e5:f1:
4b:49:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:02 2026 by rpki-client