
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: fndsD73ZxwBOqpi6MtZD5idBKZRfgCRncqejgluSN1Y=
Subject key identifier: 11:90:C6:6F:E0:1D:F0:29:4D:EB:04:92:A2:81:94:6E:14:2B:C8:F2
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019E1D596C520068D320B66AA188C585A579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 118D
Signing time: Tue 12 May 2026 18:01:00 +0000
Manifest this update: Tue 12 May 2026 18:01:00 +0000
Manifest next update: Wed 13 May 2026 18:01:00 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: ghDKCLVSpF8wZOw7niYaPIYSTUN/2KQy7ZCTdcJzwV8=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6c:52:00:68:d3:20:b6:6a:a1:88:c5:85:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: May 12 18:01:00 2026 GMT
Not After : May 13 18:01:00 2026 GMT
Subject: CN=1190c66fe01df0294deb0492a281946e142bc8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:7d:de:bc:34:3a:7c:5c:95:ac:8c:a9:4c:
d5:6a:af:26:6f:c3:ea:6f:84:c1:8e:28:af:63:0e:
ef:f8:05:3c:83:ee:00:5e:7e:53:1f:10:17:f5:33:
b5:ea:35:04:86:03:9c:e1:7b:d8:3f:44:5d:ac:5e:
58:76:be:b1:7d:cd:df:6d:4e:22:70:c1:d0:d9:1a:
75:83:79:08:b9:e9:c5:27:24:4b:b4:d7:59:2e:34:
8f:9d:a7:03:31:cb:d2:1c:a2:e7:29:62:60:2f:5d:
09:9d:55:fe:51:02:f1:df:51:0f:66:5b:7e:ec:f7:
f5:c3:37:1b:9b:7b:7e:70:a9:9b:24:97:15:5a:89:
e9:bf:e8:3e:5a:bc:68:ec:0c:67:48:87:a5:f5:12:
04:3d:f6:07:8a:17:7f:e4:06:02:3b:1b:ff:ff:54:
c8:9f:f7:41:ff:54:37:50:31:59:cd:f3:da:a2:bc:
29:dd:52:70:c2:52:5a:3e:13:fe:82:75:35:b0:5d:
2c:d4:39:13:24:66:99:04:22:1f:06:4a:b4:ab:1e:
bc:b6:c9:d1:5a:6a:bd:63:b8:48:d4:e5:b0:07:e6:
e2:fd:22:7f:a8:50:53:0a:cb:dd:b6:2b:24:3f:59:
46:e3:6c:a1:d6:69:00:cb:e5:1e:99:f6:7e:b7:fe:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:C6:6F:E0:1D:F0:29:4D:EB:04:92:A2:81:94:6E:14:2B:C8:F2
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:23:d0:6e:f3:c1:f8:7e:88:94:79:1a:e7:b2:bb:c5:02:
20:78:3c:b4:34:c3:ee:74:be:99:91:bc:58:ad:51:44:a3:9d:
fa:99:22:5b:4f:dd:71:bf:de:60:16:04:3c:d8:13:d7:5c:4a:
29:06:58:40:83:17:66:68:c0:85:e0:6d:08:51:8c:06:8a:50:
b5:eb:30:60:37:89:22:69:e8:b4:0d:75:66:44:1d:8c:11:db:
38:68:0b:c2:0a:33:a2:f0:d2:bc:22:af:6a:8a:d4:91:24:03:
3a:db:42:d7:2a:c7:d0:4f:f3:3e:77:43:78:46:b2:3d:1a:92:
12:04:e3:ec:4a:55:e6:bf:85:60:ee:2f:45:38:b1:1b:2f:c9:
da:2b:13:f1:f3:af:7f:5f:8d:80:ca:0e:93:e9:95:f0:61:ed:
a7:48:8f:c1:d1:4f:e0:96:98:a5:94:ae:a2:ed:c3:c5:f5:b8:
8a:df:db:2e:db:60:65:37:c0:ce:10:11:91:84:4d:7c:ce:b9:
7d:a5:3e:ae:18:57:ae:92:12:80:d6:06:a0:ab:cd:fa:d0:64:
7b:18:a2:d2:8f:7b:b9:f5:7a:39:96:cf:0a:eb:b6:41:7b:f7:
9d:ba:7d:f8:0d:8c:89:25:12:04:14:8a:6b:d8:8b:63:6c:7d:
f4:02:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:07 2026 by rpki-client