Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: yLAcBivSwwMQGYnN5Kb0MtaTyNhBhUwBENYhKs8WDi4=
Subject key identifier: 2C:6B:A5:33:16:D6:DA:3D:82:3B:A3:8C:55:9C:B9:16:6B:4C:5D:04
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019E1D5983FE27416D32C7E953923894D530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 5C
Signing time: Tue 12 May 2026 18:01:06 +0000
Manifest this update: Tue 12 May 2026 18:01:06 +0000
Manifest next update: Wed 13 May 2026 18:01:06 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: dnFBQPQllmmoY90Q8cge+3cPDI4JVFFPh2PqM5mXl8g=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:83:fe:27:41:6d:32:c7:e9:53:92:38:94:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: May 12 18:01:06 2026 GMT
Not After : May 13 18:01:06 2026 GMT
Subject: CN=2c6ba53316d6da3d823ba38c559cb9166b4c5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:2f:53:fb:38:81:34:fe:7f:8c:f6:d9:8b:
19:80:43:0a:fe:bf:bf:13:cb:bf:87:cc:8a:4a:88:
57:cb:81:26:3d:87:5c:44:10:c4:23:95:61:f8:dd:
2a:bd:ad:0b:f7:b7:e1:5a:28:c7:ca:73:96:f9:af:
78:de:c6:63:c1:bf:77:35:06:d9:d4:c5:f8:84:e6:
47:a3:37:ad:21:79:a9:31:8e:d2:85:14:fa:9d:59:
e4:7c:b4:61:b7:d7:69:db:38:75:f9:13:c8:58:bc:
6e:40:a6:e5:e1:f5:ec:77:31:a3:5c:f0:2a:4f:bd:
f9:55:75:4c:9b:e8:81:10:c7:a9:c2:49:e6:88:6d:
79:28:70:af:bc:55:18:70:bf:4f:ea:f7:68:81:c3:
65:ab:47:ab:fc:f6:06:40:fb:f5:88:77:6e:39:8e:
4a:23:52:a7:33:88:c1:58:bf:58:b9:52:c4:e5:89:
77:b8:50:f5:bb:f9:2e:ce:fd:e0:a8:86:e1:c1:08:
17:d0:33:20:cf:ad:2c:6b:aa:22:2f:29:4d:f1:2d:
e6:aa:09:51:a2:b1:f5:2c:c4:1c:f3:4f:27:04:0d:
c2:b5:f0:08:8d:a4:38:89:88:d2:ab:3a:15:f1:28:
45:f2:13:18:a6:70:53:2f:6c:d9:ef:17:cb:02:ed:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:A5:33:16:D6:DA:3D:82:3B:A3:8C:55:9C:B9:16:6B:4C:5D:04
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:79:86:9d:08:c4:e2:ac:39:90:bc:59:b2:a7:59:33:39:
c8:fc:64:64:50:d4:8a:0a:f8:7b:43:a7:45:4f:e6:0f:97:1e:
f1:80:18:55:99:58:08:f6:91:df:bd:f3:8a:07:44:d1:a5:b0:
55:61:9f:56:6f:e3:ea:43:a2:e0:e9:0c:ae:fe:2c:7f:c9:16:
49:9a:18:28:d4:76:ad:04:f3:c8:74:19:1d:84:b4:98:32:00:
62:29:2e:b8:fc:6f:af:59:eb:c8:9b:ba:fe:93:37:06:ef:89:
00:ab:cb:24:c1:38:be:d7:15:47:7d:1b:a5:24:24:4a:c9:f9:
2a:aa:59:54:2f:6f:90:8b:90:8e:cc:6c:68:ed:73:6a:ea:5c:
17:2f:67:ea:d4:51:d2:89:a7:96:7a:4e:0b:d7:32:65:9a:82:
b7:7c:0c:62:78:62:09:72:4f:23:e1:b9:1d:ba:ea:ab:1e:75:
7e:13:6b:88:af:1c:34:d9:31:eb:f9:8b:bb:03:4e:ea:33:de:
0f:39:81:ef:47:6c:f5:ad:9a:70:8a:33:1a:9f:66:b5:a0:3d:
52:db:9d:cc:06:4b:86:71:db:2e:5d:fb:ee:bb:a1:b0:b4:bb:
36:f7:29:ba:18:13:71:ad:6f:4b:f2:0d:6b:0e:77:c2:41:48:
bd:a2:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:02 2026 by rpki-client