Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: CqyW3TBHMP+DW0D10ZUdRohdAgDsr+zyr81FrfOgrHs=
Subject key identifier: 9D:F2:1F:29:70:2F:F4:CB:11:27:A2:BB:77:95:19:19:09:C3:05:5C
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 019E1C4714CB52592E754D5277A1FC1AC3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1925
Signing time: Tue 12 May 2026 13:01:20 +0000
Manifest this update: Tue 12 May 2026 13:01:20 +0000
Manifest next update: Wed 13 May 2026 13:01:20 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: YKHw7J7vuDuER7R3dRoHu0IMsubCuNdt8uk8Tl/bHaY=)
2: IMNGeAH2RRBE8orK0TLke0HPxKQ.roa (hash: e4rxqBMgfnAkGyLI8Cggr5KhboGpBtVTFvPT4BNFaIw=)
3: RcVTY70V665Elt1IsjokUe6IToo.roa (hash: DDNcnFztgnvUPOewAQjgDpKVycjz4DFL6+7UoNWdMnc=)
4: fdbL7NAP47irHOzJjIQ1UCPjHv4.roa (hash: /duFYYBL5EFMJ+GBSkHnBWbx00mzQ7E7FQ4nR5f4zzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:14:cb:52:59:2e:75:4d:52:77:a1:fc:1a:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: May 12 13:01:20 2026 GMT
Not After : May 13 13:01:20 2026 GMT
Subject: CN=9df21f29702ff4cb1127a2bb7795191909c3055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:d1:c9:78:ec:59:1d:f2:97:27:17:22:aa:
9b:90:fa:89:55:04:86:fa:93:82:20:f2:ef:a1:79:
25:69:36:6c:86:aa:be:83:b8:93:ec:d7:ee:de:74:
71:d6:cd:3f:dc:78:06:e4:40:f5:02:24:e8:64:66:
90:15:87:14:eb:90:76:4f:66:ff:ad:28:7b:54:85:
81:34:3c:7b:59:9d:3d:88:c7:1b:ad:ab:38:0f:55:
54:f0:96:31:08:df:ba:ff:21:97:d2:24:b7:a2:40:
90:4f:e5:07:42:eb:eb:a8:e3:fe:37:77:02:60:67:
32:de:4a:2a:02:c7:a7:98:35:65:a8:61:b6:ec:ef:
bc:2e:c8:3a:69:2b:e7:b0:9c:35:e4:50:71:7e:40:
9b:28:d5:8b:7b:2c:b4:58:12:6c:4e:72:4e:7b:bf:
92:4a:9f:b2:62:be:2e:5b:e1:de:a1:e7:d2:0a:39:
38:dd:20:7d:aa:5a:df:3f:ae:38:b2:75:f2:b0:19:
69:84:21:71:3f:49:95:59:57:f3:96:fb:a0:e1:3b:
86:c1:d6:32:ae:7f:f0:da:e6:9e:8b:50:97:a9:c0:
c1:b1:31:3f:b1:5c:60:61:e6:44:d6:19:16:ea:53:
23:a8:b0:26:f6:69:99:7a:7c:db:e0:f3:a7:6c:4f:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:1F:29:70:2F:F4:CB:11:27:A2:BB:77:95:19:19:09:C3:05:5C
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:9a:f3:69:c8:1b:80:68:53:d5:2e:d0:22:2c:56:3b:9e:e7:
98:a9:99:a8:bc:b4:3c:9e:67:23:d3:80:99:3a:b0:0f:11:e2:
27:58:c1:e7:a8:32:09:d5:6b:cc:e2:3c:0b:51:37:76:77:1e:
05:a7:fa:ef:3a:64:c7:77:a4:58:38:4d:3f:2e:39:10:5d:81:
07:88:32:cf:06:92:05:53:a3:7a:07:78:0d:23:de:90:8a:3c:
f4:d3:4a:32:a6:ce:a6:14:b1:66:e7:fb:ad:d7:28:ca:61:9c:
88:b1:03:b7:ad:45:22:9b:ab:aa:13:c5:ad:19:ce:61:3b:e9:
3e:bc:96:07:cb:31:ec:93:95:a2:1d:62:29:02:a3:68:01:ff:
9d:45:b7:c4:49:53:fd:be:d4:76:59:1c:5c:8e:32:c7:0e:27:
4e:28:0f:ce:cc:e7:a7:b6:5a:0b:0c:92:4b:3a:4b:54:bf:01:
79:e3:43:7d:7d:50:da:e4:f2:63:0a:80:6c:84:e1:b7:c0:d3:
b6:05:b6:1e:85:7f:29:c8:cf:6d:7c:2f:21:fd:82:c6:b4:a8:
37:8f:9f:13:6a:55:5f:18:5d:4e:18:ba:68:e0:6f:40:04:7c:
94:7b:27:41:d7:98:a0:27:1b:56:34:89:9a:9d:07:31:2c:30:
4f:da:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:03 2026 by rpki-client