Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: HuX3RJl0RtvxFjUM3c7eMkHxGp/f/otttWZ5U8lbb38=
Subject key identifier: FB:41:68:B0:DB:31:C2:FB:8E:23:2E:68:15:88:8E:14:C0:16:69:C6
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 019E1CB46B6A0751941C281EE71AB05E6392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 15:00:46 +0000
Manifest this update: Tue 12 May 2026 15:00:46 +0000
Manifest next update: Wed 13 May 2026 15:00:46 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: MB/Jkcajti+KPdufXJvnXpLqCHv16HCMtmYsrMOAsDo=)
2: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (hash: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:6b:6a:07:51:94:1c:28:1e:e7:1a:b0:5e:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: May 12 15:00:46 2026 GMT
Not After : May 13 15:00:46 2026 GMT
Subject: CN=fb4168b0db31c2fb8e232e6815888e14c01669c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:ee:1a:9b:d0:2c:8f:b8:da:ec:ba:b0:88:
03:97:35:59:9c:6e:e5:32:a2:f6:46:2e:92:96:c0:
31:1a:d5:9c:96:6b:1c:28:a0:96:0a:a2:8c:05:67:
57:ad:b7:a1:ba:44:5c:4d:22:53:f4:ff:56:8c:d3:
41:e4:a1:7d:19:cb:d2:ab:bb:69:e0:4e:d9:9f:71:
0c:03:df:3a:41:a7:ad:17:fa:73:9d:82:9f:0d:19:
5b:5e:80:40:f0:c3:9b:de:1d:f8:55:dc:7a:14:d6:
8d:b0:0f:f5:40:42:8b:b7:81:d1:10:85:92:a5:ab:
e1:dd:21:1e:3e:8b:7a:1b:13:25:78:61:ec:6a:44:
0e:a3:de:25:77:31:e2:23:77:ac:49:18:2d:ed:fd:
ff:43:c8:fc:40:df:2d:93:e6:d0:13:47:b0:26:7c:
61:33:ce:fd:93:17:37:ef:b5:2c:91:0b:b3:38:a3:
93:06:1c:86:8d:01:d3:c3:c0:d2:17:68:e9:58:96:
c0:05:47:5f:27:6b:1f:cb:74:69:4c:33:a2:9f:39:
01:06:d7:78:3c:26:a5:bf:56:df:4b:f6:ee:25:68:
2f:3e:3a:4c:e6:86:4a:53:f1:e6:b6:42:7d:fc:4a:
53:33:dc:18:00:f2:eb:52:1c:a2:de:72:1d:5e:44:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:41:68:B0:DB:31:C2:FB:8E:23:2E:68:15:88:8E:14:C0:16:69:C6
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:52:e8:24:67:d4:8e:d0:17:6c:c2:eb:f6:87:87:71:c3:
bc:d7:cb:d8:e4:9c:fc:dd:a1:a9:32:0e:dc:da:f4:2e:4b:b0:
c2:ea:fb:63:0f:de:be:6d:d2:0d:f5:7a:85:7f:91:f4:1e:d1:
d1:cb:af:64:a1:33:a3:09:4f:f3:17:bf:47:a0:be:4b:01:95:
28:6f:f3:c4:88:90:cc:c1:05:62:3c:8a:02:02:5c:4f:40:9e:
49:8f:f3:cc:83:48:1f:f4:e2:0d:06:2b:ed:6c:b7:9b:30:b0:
20:3b:cb:5b:33:5b:2d:36:e7:b4:8b:08:67:f4:d6:8d:51:4a:
b4:d7:fe:ab:72:db:59:43:94:aa:e5:a0:46:b4:ed:27:ea:7b:
4d:99:4e:21:b1:72:7a:da:34:f1:9c:07:65:1d:b5:c9:4f:cd:
0c:7d:88:41:f9:95:a2:40:98:bc:52:68:0b:cc:45:c4:22:40:
a9:45:2c:1b:a6:e3:1b:d4:30:2b:a6:bd:d3:7f:ae:1c:0a:75:
fa:20:32:05:97:18:42:36:28:51:8e:3e:ed:55:21:61:e4:43:
fd:2b:60:ec:19:cb:c3:b0:a8:62:21:6a:62:94:45:18:37:c3:
95:d3:3c:8e:59:08:bf:39:a6:d3:6e:7b:09:71:5b:1c:ca:3c:
65:bd:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:59 2026 by rpki-client