Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: o4FenOQnxC0VqqbSBHiHDBuBTOLvYItfK1YeniN4Vhs=
Subject key identifier: D8:5A:05:6E:BF:56:1D:4B:BF:CB:54:D3:0F:C2:6E:A0:D8:AD:D9:42
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 019E1F7F3B261064524CB81304A9558B7EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 0363
Signing time: Wed 13 May 2026 04:01:32 +0000
Manifest this update: Wed 13 May 2026 04:01:32 +0000
Manifest next update: Thu 14 May 2026 04:01:32 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: FVXx1r6Nz9TYTpufCldItZWdEu60MISnOIcEVx+lFLM=)
2: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (hash: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:3b:26:10:64:52:4c:b8:13:04:a9:55:8b:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: May 13 04:01:32 2026 GMT
Not After : May 14 04:01:32 2026 GMT
Subject: CN=d85a056ebf561d4bbfcb54d30fc26ea0d8add942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:a7:f0:96:40:95:cb:a9:36:6d:7d:d8:51:
3a:ec:1f:cb:fc:1d:d9:84:ee:ed:63:40:97:37:4f:
b5:14:00:d0:3f:c3:f7:e6:4a:ed:dc:0e:ed:23:54:
a2:8b:04:33:31:db:2b:ff:69:52:cb:2b:e5:7d:22:
37:1f:2b:d0:b9:fc:63:c5:bc:e9:dc:44:45:d9:37:
c0:e9:98:69:e9:91:f2:c7:5e:5b:88:2c:3a:b0:27:
46:a2:29:96:f5:76:7b:4c:e8:e9:1e:6b:31:1b:ee:
70:f2:25:a5:15:87:bc:47:2a:0e:b8:31:f0:ca:4a:
28:f8:19:f4:cf:68:fb:21:c2:1a:2d:32:64:50:3f:
88:7b:8a:e4:93:c3:09:60:77:1a:f6:a7:6c:76:d6:
30:17:e1:6a:cc:c3:f3:46:6f:dd:e8:ca:85:f6:c1:
a6:b8:1e:20:ea:2f:d3:c1:06:64:3e:60:a9:8b:f3:
3a:ee:df:e6:2c:98:67:00:f3:8b:88:8e:b9:8a:2a:
ef:25:44:8c:86:d1:0e:be:09:62:4b:24:eb:67:ce:
4a:73:aa:a9:b7:f3:ec:bc:ab:81:4e:97:82:58:07:
50:79:05:b7:3e:82:7c:e1:78:7c:d7:04:17:ec:3d:
e7:58:be:53:6b:af:96:eb:6c:13:c9:8f:35:3a:bd:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5A:05:6E:BF:56:1D:4B:BF:CB:54:D3:0F:C2:6E:A0:D8:AD:D9:42
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f9:c1:e2:65:d8:ef:e8:a8:7c:8b:08:2c:55:4a:a5:e4:58:
63:d1:0e:03:34:99:f0:9b:5c:83:c8:45:3a:bb:5a:69:a4:d0:
45:31:8b:8e:55:9b:4f:fb:59:e9:76:57:57:7d:53:7d:85:4f:
af:fd:17:b3:56:6a:9d:38:e6:6f:0d:26:37:1d:8d:76:64:41:
76:52:a1:33:e5:83:af:6e:14:45:20:9c:09:0b:e4:5a:5c:b5:
44:55:52:9b:b6:39:ee:3e:ac:61:8f:82:ff:74:76:7a:b2:5b:
3b:e3:9d:fc:6c:e2:54:c2:1f:33:36:b2:55:d9:40:d7:ee:60:
11:da:6e:a5:33:91:4b:75:57:03:02:da:d4:1f:54:53:dc:78:
25:20:4f:c0:34:44:d7:44:01:1e:46:fe:2e:e3:d0:9b:46:da:
b4:62:9e:b2:e6:c3:3e:d7:e7:f1:b2:b1:dd:6d:a7:fd:74:f5:
71:6f:31:a0:94:ec:b1:0b:b0:f9:a4:85:47:f2:b3:98:d3:78:
a7:8f:92:78:1b:17:a9:a9:12:41:c0:05:31:8f:c0:c5:08:93:
1c:a4:c3:a3:18:cf:80:40:34:f7:34:30:cf:56:56:5b:e1:4b:
72:41:d4:3b:b0:a4:28:90:d6:6f:bb:ec:4b:a5:87:37:83:27:
27:16:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:26 2026 by rpki-client