Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: gSVyj08Jv9qbai6SgjegJBfKGcNGVcIlC3gxix/JMsI=
Subject key identifier: C2:5E:18:68:73:BB:46:8C:A9:5B:71:17:7A:6D:ED:EA:36:A8:E3:72
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019E2023FF5C1477702D5F6DE4D9C326655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 15C2
Signing time: Wed 13 May 2026 07:01:30 +0000
Manifest this update: Wed 13 May 2026 07:01:30 +0000
Manifest next update: Thu 14 May 2026 07:01:30 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: xGnqzet3t9ZPCEc/YbCVtLoP+jMo03FrEkPpDXaMRz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:ff:5c:14:77:70:2d:5f:6d:e4:d9:c3:26:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: May 13 07:01:30 2026 GMT
Not After : May 14 07:01:30 2026 GMT
Subject: CN=c25e186873bb468ca95b71177a6dedea36a8e372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:9b:23:db:85:30:54:d3:8a:80:aa:b6:ed:
6a:81:ac:d6:0b:2d:45:f7:99:78:aa:48:bb:c7:53:
57:e6:da:c4:44:75:da:79:be:ed:bd:3c:60:55:1a:
7b:5c:b3:de:41:cc:91:22:6b:a8:db:81:00:b9:6f:
7f:3f:f8:43:de:a3:d9:cc:fb:43:62:c8:ce:ca:89:
bd:20:df:7f:31:81:ef:a2:ea:3b:82:03:08:c5:27:
56:55:db:30:89:31:c7:2a:97:7d:e0:9e:0a:40:19:
6d:17:74:e2:07:82:e8:59:df:69:43:8f:14:de:bf:
76:32:ed:2f:f0:6b:11:25:13:9d:5d:dd:f5:2f:94:
74:53:30:56:e9:6e:46:71:ee:42:64:20:26:11:7d:
f2:17:62:19:04:22:a0:07:e5:b8:4a:8d:1c:f2:1a:
e4:1a:c3:f5:3c:26:af:d1:cd:d3:9b:b3:f7:ae:7b:
71:09:ff:a5:b0:0c:7b:35:2e:cd:ef:43:29:24:62:
27:0e:04:a9:a1:47:94:42:29:7a:bc:db:8c:df:09:
43:fc:81:13:6f:73:6f:d0:ac:94:a8:a0:53:9a:c3:
6e:56:ef:fd:3a:79:4d:1d:61:18:b8:2a:cc:47:7a:
92:d0:25:b2:09:4e:b3:92:ea:ec:c3:75:d6:b0:7a:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:18:68:73:BB:46:8C:A9:5B:71:17:7A:6D:ED:EA:36:A8:E3:72
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b4:dd:86:ca:ef:2c:e7:be:28:2a:87:16:65:bc:19:5e:20:
a2:87:2e:f8:bc:d9:be:22:32:6c:62:3d:d6:1b:78:ce:63:79:
89:31:85:0d:31:bd:95:45:cf:1b:ab:07:50:63:ee:6d:28:62:
9a:10:a4:f3:18:b1:20:09:13:64:5a:d4:0d:3f:09:10:04:f0:
60:fe:14:ff:f6:c6:cf:34:ee:15:8d:44:3f:f1:0b:31:07:75:
27:89:2d:a0:3d:cd:ae:b8:f6:b8:98:a7:ad:29:ad:19:4a:8d:
87:7b:8a:d9:a8:c1:ac:a1:b7:d5:13:d1:18:96:4f:80:ed:b1:
fd:04:4a:ce:e0:06:c8:3c:87:04:02:19:80:18:35:b8:ce:88:
e4:f5:eb:fc:99:b1:09:5f:69:19:5e:ca:55:24:2e:0c:f4:37:
36:00:b6:bd:55:bb:fb:a8:c3:56:61:ca:02:41:49:3d:56:bf:
83:bf:70:49:41:8f:2c:0a:df:ec:71:33:38:47:26:92:ab:4b:
ab:1c:cf:e0:e8:38:4b:a5:f5:67:60:be:39:a3:c4:0d:62:79:
62:dc:a8:0a:f4:a8:29:a9:98:04:67:d7:c4:5e:72:9b:76:8b:
e7:d7:b0:76:41:63:54:9b:f8:76:79:63:95:ba:9d:f5:34:0e:
96:41:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:46 2026 by rpki-client