Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: 4QoLC151AlMJ74ZYgQ1VCvoaTaBvJ7UjRb5XSgnITqQ=
Subject key identifier: 56:78:6F:BD:5B:6C:9B:D4:52:DF:B9:37:E5:FD:41:57:62:77:A4:23
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019E1DFED97CEC56E0925F21C36C9D6A7843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 21:01:41 +0000
Manifest this update: Tue 12 May 2026 21:01:41 +0000
Manifest next update: Wed 13 May 2026 21:01:41 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: S9FtVpIR7yNGsobss+elu67C+HBGNb9xZVpEYj/7vWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:d9:7c:ec:56:e0:92:5f:21:c3:6c:9d:6a:78:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: May 12 21:01:41 2026 GMT
Not After : May 13 21:01:41 2026 GMT
Subject: CN=56786fbd5b6c9bd452dfb937e5fd41576277a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:82:11:01:3d:8f:92:ed:fb:b5:3a:f7:84:
42:d2:6c:01:f6:15:33:95:79:03:21:84:9f:71:38:
77:e5:9f:d1:da:d3:42:3f:b0:54:6e:6c:1f:45:4f:
d9:3b:8b:06:97:43:b8:7a:d3:28:5b:20:2c:84:71:
01:4d:d9:1e:8b:00:26:15:ff:f0:d9:92:73:a6:b4:
35:6e:c3:88:19:78:06:bc:63:24:7a:04:fc:0f:f3:
f2:79:de:0d:a7:69:c8:77:30:f5:40:c9:20:0f:81:
ab:91:43:e9:59:18:26:cb:9d:fb:11:f7:a3:76:6e:
bc:e0:46:7c:e0:52:d9:a7:30:0c:8c:11:60:fb:0d:
55:dd:c7:e9:d4:a7:d2:70:6c:62:3d:f2:ea:fa:a3:
6d:db:f0:d6:dc:41:a0:37:53:fc:f2:46:34:43:03:
62:56:c2:e6:86:c0:1c:3f:4b:d4:c7:4b:f5:9f:11:
74:7e:a2:e7:fb:25:63:93:4d:5b:e9:1e:31:9b:63:
a3:24:76:d0:0e:33:9d:29:30:5b:86:cf:ed:90:3e:
1a:70:8d:a4:56:32:ad:0d:a6:98:cc:13:03:19:35:
d1:aa:07:7c:11:a7:76:03:24:10:21:bd:e7:16:ad:
17:2d:10:ab:0e:bf:24:07:e1:c8:03:be:84:03:b9:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:6F:BD:5B:6C:9B:D4:52:DF:B9:37:E5:FD:41:57:62:77:A4:23
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:9b:bc:2f:96:48:4f:92:25:ee:78:57:56:a3:52:5d:48:
0a:3b:9e:39:25:8f:ec:a8:c5:72:20:75:90:ae:f8:56:d0:5e:
6d:85:86:8a:87:3e:fd:99:b8:20:d1:6f:79:61:22:fc:e7:0c:
4c:b1:35:ce:2d:db:b8:1e:61:88:f6:9b:1b:da:e4:15:fa:02:
0c:f1:ba:7b:91:dd:c4:42:f3:a0:19:28:e2:87:b9:df:ed:6c:
50:f5:83:59:25:3d:18:9f:bc:23:06:3a:f4:4e:84:ef:c1:d1:
ca:7d:e2:28:54:3f:4c:ee:77:a7:7e:30:dc:e5:1e:b8:4a:72:
4e:f7:24:d2:00:5d:8e:93:ed:25:07:cc:7c:49:51:d8:7f:dc:
df:74:89:ee:14:8d:99:e2:b6:70:6c:f9:0e:cc:cd:fd:bb:11:
58:a5:f1:e9:a7:49:46:62:4b:66:7b:65:93:16:0f:22:ca:d0:
dd:a3:c5:41:18:53:43:51:fc:0c:e7:91:d9:90:d7:f0:0c:8e:
fb:bd:8e:53:bf:d0:53:12:db:05:c9:2f:75:f3:c6:10:05:5a:
22:ac:0e:7b:94:3c:57:65:9b:9f:2c:9d:b9:49:44:17:7b:10:
09:3b:df:86:f7:da:8e:2e:f0:c7:f8:4f:79:ae:c0:b0:15:85:
ef:c4:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:08 2026 by rpki-client