Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: g9DIun4koteecwIrEmh33IS5QGi8e7QwDnM2au9sEQE=
Subject key identifier: 65:EE:86:1C:AC:E9:85:DA:7E:47:27:10:6D:FB:C6:39:03:3C:00:52
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019E1CB4846F736A1E21A665A70D07D1D4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1648
Signing time: Tue 12 May 2026 15:00:52 +0000
Manifest this update: Tue 12 May 2026 15:00:52 +0000
Manifest next update: Wed 13 May 2026 15:00:52 +0000
Files and hashes: 1: 0_VDRwikWTvRQIQsMp3aqjlVQuQ.roa (hash: X74/QCu3+W4NQQ4c/uIC5xYm7kaBm7r/kGt68bnJBmk=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: ERK3vHNjdRCkWIxMtZGPumwx35jx9g8fIU6len4eNUk=)
3: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (hash: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=)
4: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
5: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
6: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
7: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
8: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
9: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:84:6f:73:6a:1e:21:a6:65:a7:0d:07:d1:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: May 12 15:00:52 2026 GMT
Not After : May 13 15:00:52 2026 GMT
Subject: CN=65ee861cace985da7e4727106dfbc639033c0052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:39:8e:36:a4:60:cf:74:0b:20:46:15:12:12:
79:65:13:e8:7c:ec:02:4c:4c:96:52:16:5b:e6:92:
03:09:d3:7a:80:01:80:93:82:3e:2a:4d:43:b9:9e:
26:be:d1:02:fc:1c:9d:dd:32:dd:98:1c:93:af:d1:
a8:9e:fa:83:e1:a8:5f:8d:c9:f5:85:fc:4a:c3:f3:
32:e5:99:fe:12:5f:58:56:c7:20:80:d6:cb:4b:6f:
1f:37:f3:04:cb:71:9e:d7:1a:2b:0c:2a:7a:80:97:
e8:ce:c1:07:95:15:29:1d:7c:6a:08:23:22:b3:3c:
9f:e6:62:1b:bb:2f:9d:1f:b0:b6:90:70:e0:0c:e9:
75:c8:b7:4e:95:8e:63:c5:2a:34:f3:01:09:3d:3a:
81:61:42:5b:a1:32:92:aa:a6:fc:08:a3:60:e5:7f:
a4:f1:d1:e3:04:f9:39:e2:f6:e5:e9:8b:d7:ad:96:
1b:23:77:4e:82:e4:5d:b7:1a:fe:d3:06:ad:81:19:
32:c1:f9:bc:64:ab:76:bf:6e:8c:c2:05:09:51:32:
57:0a:aa:01:85:26:b5:82:44:40:03:e4:63:51:f3:
ad:6c:0a:39:0e:ca:61:ac:1a:6d:bc:f4:59:ba:ec:
ab:24:65:63:28:f5:24:16:81:6c:04:c7:01:84:b7:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:86:1C:AC:E9:85:DA:7E:47:27:10:6D:FB:C6:39:03:3C:00:52
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:64:f1:c7:5d:51:0d:4d:f4:b0:f5:2e:27:ef:ec:94:b1:6c:
fb:07:2f:f2:d6:9f:f8:91:cd:f0:47:b6:0b:f2:db:e1:0c:4a:
31:4e:af:c7:d7:3f:67:9e:46:93:23:02:05:ee:ae:dc:6b:71:
bc:39:59:49:5b:56:3f:87:22:03:c2:ed:ac:49:27:a7:ca:41:
7c:e6:83:b1:18:e0:d5:12:2b:a7:b3:48:b6:f4:9f:a4:7e:99:
fe:b1:65:c8:3c:55:82:58:02:77:49:06:58:9c:51:81:0a:79:
45:61:9b:3a:7d:15:9d:b3:89:68:52:ff:bc:2e:6a:81:e3:8e:
3d:1c:78:d4:2d:9d:21:f5:03:d5:69:21:6d:3f:d6:52:25:24:
83:e4:c4:de:04:95:d1:50:c5:e2:4d:88:80:7a:84:bd:16:38:
43:75:fe:8e:74:44:08:ba:ff:8b:50:10:11:62:ac:07:1c:ca:
e3:b4:fe:91:04:51:c0:87:d2:11:41:33:6d:e0:8a:15:9c:06:
a9:5f:e8:24:4c:8d:4d:b8:c5:c3:4c:34:e3:a3:da:01:48:e2:
0f:84:48:77:2c:df:e3:3f:15:12:b4:a4:ee:f5:a0:99:6a:30:
4c:1d:5b:23:e9:d7:df:72:05:1d:88:3a:b5:3a:56:1b:d6:c3:
e1:13:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:57:12 2026 by rpki-client