Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: yaxZoQc3ipi8+c3c8ndAqDc47WgtSXusI6s48Ss90qc=
Subject key identifier: B0:D4:5E:E9:66:CE:91:92:5C:09:2E:EA:89:5D:54:A5:48:76:68:C1
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 019E1F114B3A05F80B397945823B41CADB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 02:01:27 +0000
Manifest this update: Wed 13 May 2026 02:01:27 +0000
Manifest next update: Thu 14 May 2026 02:01:27 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: VJYcLxtWUOxxgcdXCyRz/st7/po+3grXux62AOs26Gs=)
2: otrcKIXq_A9uaKlz_d5wq-4G144.roa (hash: 384/aWNa4g4uNh0J2+RFW9VIMxNrtEwydVkvP0K9KIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:4b:3a:05:f8:0b:39:79:45:82:3b:41:ca:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: May 13 02:01:27 2026 GMT
Not After : May 14 02:01:27 2026 GMT
Subject: CN=b0d45ee966ce91925c092eea895d54a5487668c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:5f:28:40:b1:ea:9b:e5:c5:f9:df:ee:a4:
42:fb:4d:da:dc:75:55:0a:0a:ba:1d:0c:b2:92:8c:
b6:d3:81:0b:a8:3d:6d:d8:9f:45:d3:15:3d:b8:70:
40:15:c9:75:dd:77:c7:cd:bd:df:de:6b:cb:9d:06:
c2:d5:7d:ee:0a:d6:53:1f:c3:ae:c3:b8:5d:21:1a:
21:49:78:e2:a2:cb:21:f2:a0:5e:94:02:30:5a:cb:
04:83:1c:e4:54:75:62:65:e4:a6:ab:20:b3:6a:97:
ab:fa:5b:40:32:31:c3:35:4c:3e:d5:b1:aa:e8:62:
a1:ee:f6:95:0b:37:fd:9c:dd:43:42:8a:57:d6:35:
74:8c:b9:9a:e7:38:f9:89:42:b5:d5:60:06:f5:bb:
69:39:77:63:63:42:ed:95:90:a1:b1:2d:65:fd:a5:
30:46:dc:f3:26:85:eb:c1:f7:cf:04:d4:64:b3:4d:
4c:7c:13:c0:fd:7d:ad:71:9b:e6:8f:62:e4:79:66:
c5:5b:45:68:a4:1d:1d:d6:a2:c0:76:38:be:e7:fc:
3f:00:d3:54:29:1f:4d:1c:fd:d6:bf:6b:d8:78:e3:
a3:da:ee:e4:7f:4a:d9:72:6b:b7:ee:0b:a4:b6:53:
d8:20:15:ee:27:b4:d3:f4:e5:33:9c:5a:35:24:c2:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:5E:E9:66:CE:91:92:5C:09:2E:EA:89:5D:54:A5:48:76:68:C1
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:7a:28:dc:fc:c1:06:ae:d4:5d:16:09:24:15:0b:c2:27:c8:
99:ae:9f:19:5a:6b:c5:9a:da:58:73:d2:7d:95:67:18:13:b0:
b3:25:da:c1:8a:0d:86:7b:ed:d1:cf:ed:ab:4f:45:5d:80:ea:
25:b0:50:9c:04:70:d0:bc:a4:3f:89:30:68:25:50:20:46:0c:
96:69:75:28:bd:a2:39:08:a4:11:43:b9:ad:9e:0d:fd:74:8c:
9d:26:4a:b4:cb:32:af:98:8e:f8:22:84:53:63:46:90:1b:58:
64:5e:5c:17:c3:a6:6f:9c:50:5f:59:a7:a1:16:26:bf:fa:91:
fd:f8:25:aa:d2:41:c2:17:f2:36:58:03:e0:a4:f8:53:93:9b:
97:e1:d5:f0:3d:d4:9c:f4:82:81:72:60:ae:42:12:b3:f3:6a:
1f:e1:f2:2c:03:89:c3:a4:dc:75:99:c1:6d:7e:c9:98:d3:34:
48:9e:34:b1:04:6a:71:e2:65:06:72:fd:90:d5:04:b0:9f:9b:
4a:a3:94:4b:68:bd:dd:80:8b:7d:80:0f:35:4e:fb:e7:e0:51:
98:96:87:9b:6c:0f:35:76:4a:fb:71:26:72:78:6c:a4:78:43:
ba:19:9d:06:68:aa:4b:34:fe:dc:e4:28:08:56:6f:63:00:b8:
8b:c9:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:44 2026 by rpki-client