Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: Te06fG8B5pjX3bQ0u8tgoUleOx6ykZmbryII/pIQeFQ=
Subject key identifier: 86:84:0D:B4:64:F0:3A:93:12:DC:35:93:B8:4C:A2:ED:3A:25:62:4A
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019E1C103759E97E59743FC774D3A71CFD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 12:01:25 +0000
Manifest this update: Tue 12 May 2026 12:01:25 +0000
Manifest next update: Wed 13 May 2026 12:01:25 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: 7N9yc4i6eB90FxAG4JjtoWCgxyTOO5HTU6oTcBXFCOo=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:37:59:e9:7e:59:74:3f:c7:74:d3:a7:1c:fd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: May 12 12:01:25 2026 GMT
Not After : May 13 12:01:25 2026 GMT
Subject: CN=86840db464f03a9312dc3593b84ca2ed3a25624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:fc:55:3b:24:45:26:88:6d:7c:b0:65:30:
fe:59:7e:bd:3a:e0:c7:40:5b:8d:71:dd:4b:1d:45:
60:51:32:31:a5:85:24:7f:72:1f:fc:2f:6f:0d:86:
6f:1d:3b:ac:35:0b:76:88:1a:e5:0d:73:ee:08:89:
68:7a:35:fa:49:5c:35:0e:dc:f0:4a:67:b3:b5:b7:
15:4e:8a:95:1e:72:41:c0:8f:2f:95:84:71:a8:88:
1c:49:58:6d:e8:c9:af:71:60:a3:59:53:68:0e:4a:
bf:b7:32:b1:49:a5:e1:bd:85:9e:64:ed:ca:68:4f:
b8:db:c6:d3:0b:e5:64:44:d8:25:42:be:10:96:25:
e7:94:3f:32:0b:2f:78:bf:77:fc:e4:09:3d:41:99:
37:85:84:4b:f3:cb:da:82:de:be:6a:61:e5:30:54:
84:44:eb:58:7e:6e:7a:1c:fa:d1:01:14:2d:18:db:
db:e8:94:09:3f:73:ad:1c:ae:39:f6:9a:70:a6:7e:
b4:fa:23:a5:d1:f2:8f:44:94:fa:ec:eb:00:b3:09:
d7:b7:e2:30:05:9b:07:ca:32:05:68:fd:65:4f:e9:
57:01:66:0a:2e:61:44:ec:95:4a:35:f6:21:26:cb:
58:ae:23:6b:33:24:5b:15:6b:c3:07:e6:99:96:8f:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:0D:B4:64:F0:3A:93:12:DC:35:93:B8:4C:A2:ED:3A:25:62:4A
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f9:ef:19:c2:73:be:6b:af:98:3b:72:1c:3a:97:6c:7e:fd:
9c:52:31:26:92:a3:13:f7:54:f2:19:56:47:ef:e5:e3:4a:10:
06:12:84:17:09:27:b6:3b:8f:a8:ba:d6:77:07:a5:9e:03:82:
f5:08:34:e5:e0:ea:c3:8f:73:9b:3b:74:7d:e7:fc:72:ee:2c:
ab:38:dc:33:ac:2f:a8:9a:c4:09:a1:0d:7a:7a:a4:fe:3f:d3:
98:2e:ca:89:f2:49:09:87:10:f4:f6:51:a6:95:76:86:a4:ac:
5f:bb:4c:f1:36:1f:22:87:a4:c5:fa:32:c2:27:39:6b:4b:3b:
ee:01:9b:b0:ce:a9:11:80:ed:3b:1f:b7:18:97:b2:cd:e1:e1:
4a:b0:74:58:53:d7:eb:f2:f3:5f:53:55:81:7f:8c:bb:38:b5:
04:f5:37:96:51:c0:da:19:e4:06:44:3c:cc:e6:07:46:02:52:
bc:42:6a:12:0f:94:da:e8:72:52:f0:10:17:9e:ee:bb:d8:76:
56:03:aa:cf:13:29:4c:e8:a6:1c:90:f4:d6:e8:97:43:f5:44:
31:d3:5e:76:e2:6c:e8:0b:ee:68:bb:69:5e:a9:50:19:e4:aa:
1c:d7:f7:c5:78:47:ff:72:da:73:b6:97:45:f1:c2:ae:b0:68:
a5:5c:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client