Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: E6Pft6eCnUCz0RwKtoDdHkKHbXfyYfD9GuISD32kA74=
Subject key identifier: 16:00:33:9B:DC:AA:C7:9F:41:2D:3A:C9:52:43:3B:15:C2:8E:1B:95
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 019E1D90BAFF220CC909AC1D675C84ED81AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:24 +0000
Manifest this update: Tue 12 May 2026 19:01:24 +0000
Manifest next update: Wed 13 May 2026 19:01:24 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 5SNomO71prIUHNKVCyHA1dFuka21c0K6fLi5PNUE5VE=)
2: QVJESyUgcIDmNN8KuNewhKTn8O8.roa (hash: rsPEgVBQN8qb3Gf6bi1+pSFcHaV0wEFs/DT4FZ8+49I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ba:ff:22:0c:c9:09:ac:1d:67:5c:84:ed:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: May 12 19:01:24 2026 GMT
Not After : May 13 19:01:24 2026 GMT
Subject: CN=1600339bdcaac79f412d3ac952433b15c28e1b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:f0:5c:a6:08:bd:5c:07:5a:98:be:c5:2a:
e9:23:5a:77:ea:bb:eb:b6:3e:db:e6:22:9f:d6:24:
61:d3:0a:3f:cb:e7:e7:b1:f6:63:5c:07:08:04:d0:
7b:6a:8b:68:0f:ad:b8:ce:49:bb:18:92:1f:0e:d1:
73:07:5d:2f:ac:17:71:f4:ef:94:25:33:93:3e:45:
6d:25:32:dd:62:db:f3:1e:4d:68:4c:38:e8:cc:33:
25:21:6d:10:77:58:f0:7b:84:24:02:73:3b:bc:c2:
b0:f2:c8:60:9e:f9:8d:ad:81:04:ec:27:01:43:ce:
85:26:9d:f6:75:b8:eb:01:91:02:c8:4c:9b:9c:13:
d2:c7:49:ea:7b:10:4f:ad:6f:03:27:2b:cd:46:45:
82:91:d3:ad:25:8e:78:fc:7e:c0:1b:b6:46:1c:35:
0e:ce:b7:7a:d4:31:a1:26:84:6e:bf:17:82:6c:e6:
e9:95:48:a6:fe:77:b2:34:de:2a:54:fc:78:06:56:
12:13:27:83:d5:14:65:58:ad:c3:b0:e8:ca:d7:cc:
9d:a0:fb:68:c1:59:5c:f6:78:df:fb:ff:fd:0c:07:
d0:c6:8a:5d:bb:35:53:da:70:cb:fb:aa:8b:d9:40:
33:b5:7c:24:f6:26:4d:89:ab:06:3d:46:89:d2:39:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:33:9B:DC:AA:C7:9F:41:2D:3A:C9:52:43:3B:15:C2:8E:1B:95
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c7:68:67:62:b8:53:2b:db:df:b2:7c:ee:28:b5:f9:06:bc:
f1:95:2d:99:d6:26:71:8f:bd:b2:e4:04:5f:97:49:8f:19:5a:
c6:fe:6f:55:f8:59:2e:97:61:cc:56:28:d4:8f:a1:36:53:c9:
3a:3a:5a:45:77:18:1d:7a:76:f2:29:0a:0a:28:46:37:74:61:
09:ea:41:36:48:2a:57:0f:bc:65:97:82:bb:6f:44:67:f4:be:
eb:27:4f:00:9a:d5:2c:d6:ff:be:d8:bf:0e:a4:7a:7f:ab:85:
25:9c:57:a9:94:af:96:b5:da:4d:56:b8:b7:d7:ed:93:39:54:
d6:e4:a7:a6:9d:85:01:34:b5:bb:ee:4d:9d:35:fc:82:55:ae:
ae:2a:ac:51:fc:cc:5a:0f:3c:17:9e:62:63:21:b6:3c:7a:c1:
cc:32:99:17:4c:15:d0:38:6e:dd:b9:90:03:db:ca:fa:18:fa:
ae:a6:db:20:64:0a:9e:de:1c:64:2c:fc:00:fd:e3:57:c2:88:
20:c4:90:82:97:29:65:5c:df:26:55:77:ba:3d:f0:69:fb:a6:
67:95:ea:63:5e:4e:da:1a:80:c5:e3:35:bb:85:34:96:bd:8f:
6f:a7:04:e7:8a:58:b6:af:d2:b4:46:aa:dc:e9:37:e9:14:2e:
cf:67:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:01:58 2026 by rpki-client