Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: CYIzK9jfDfbqwMi11PDmCFESc356HJ6HUO2ehJirV0k=
Subject key identifier: E7:32:67:05:29:EE:22:74:58:43:9A:D6:03:24:AF:54:76:73:AC:4C
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 019E1EA3D824CB4A5EB06F5F5F6F209E2276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1904
Signing time: Wed 13 May 2026 00:01:54 +0000
Manifest this update: Wed 13 May 2026 00:01:54 +0000
Manifest next update: Thu 14 May 2026 00:01:54 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: DQS6ucX/PBO+3/g83zvjxBclKiJWpQIC3T+8KmHQSyE=)
2: eiZ3dRoJQOY5In2On20-nf-q73k.roa (hash: GE2likVbzstV6xbMDw5q0Xw8FdnZheeQhcKCOGkCp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d8:24:cb:4a:5e:b0:6f:5f:5f:6f:20:9e:22:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: May 13 00:01:54 2026 GMT
Not After : May 14 00:01:54 2026 GMT
Subject: CN=e732670529ee227458439ad60324af547673ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:97:56:09:5e:31:81:0e:f3:37:36:0f:d9:
60:27:86:20:45:f5:73:a0:ce:48:f7:ae:df:be:cf:
ee:f7:c7:4e:60:a6:08:e0:98:77:ab:21:3a:8b:93:
ec:65:a4:52:92:6f:7b:ff:b5:e7:dc:dc:28:b5:17:
76:bd:68:0e:e4:3c:af:cb:b4:b0:08:30:55:70:25:
bb:65:56:31:05:11:e7:00:47:d7:0b:0f:e9:a2:b8:
3c:24:56:a9:5e:67:c5:5e:e7:c6:0a:39:07:16:42:
08:1c:af:c1:9b:08:ef:1a:8f:cc:f4:96:c8:fd:40:
34:10:f1:bc:26:68:bf:5e:92:41:fb:22:24:d1:b7:
ee:4a:0c:c5:cc:db:d5:0b:34:a7:b2:0d:5d:6d:b5:
22:ba:74:7f:14:af:7c:98:d8:28:9d:1c:18:39:3d:
5e:94:ef:f6:c2:c9:bf:e5:ac:09:fb:e3:02:98:9c:
e5:ec:19:7a:61:ac:e1:b3:ca:62:44:93:29:61:6b:
2c:24:fc:35:89:ad:02:48:c2:be:2c:d2:84:8d:13:
6e:9b:5b:81:9e:1b:6c:6d:fb:b5:f4:3e:3b:d9:3e:
c6:6f:8e:5c:59:7d:f4:0e:f7:09:de:96:e5:96:8d:
05:b7:73:6e:bf:f9:af:cd:11:71:1a:77:f7:df:2c:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:67:05:29:EE:22:74:58:43:9A:D6:03:24:AF:54:76:73:AC:4C
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:b3:c9:74:12:0f:b8:83:4c:ca:fd:85:7f:39:e4:73:a8:
6d:3b:ed:32:e1:d6:eb:21:8e:6e:ca:10:19:5e:71:a6:3e:a0:
6f:c5:b3:9e:c6:5b:ba:ba:84:98:e9:f9:20:d8:a6:4e:5a:2e:
3f:e8:c8:01:e7:0a:f6:f4:ad:d6:4e:08:fe:9d:a0:12:a4:c1:
28:65:e2:8d:b6:44:77:76:da:df:d0:fb:90:65:f9:df:05:27:
ad:84:7a:2a:c6:b6:2e:f4:9f:41:11:61:5f:f0:ec:93:19:7d:
bf:3c:d4:d7:ee:eb:14:4b:fe:44:5e:13:bf:71:b8:2a:0d:42:
78:5d:b1:1b:29:34:53:32:f4:e8:9c:da:ab:97:46:e6:42:a2:
f5:fd:21:70:e4:fb:23:9a:7d:d8:3f:23:7b:7f:b5:27:b3:d5:
40:04:db:03:0a:39:c3:6c:b5:ca:f3:f8:bb:6b:07:8c:1d:95:
23:ee:c9:29:fa:42:64:ce:b7:87:3a:ae:63:b0:39:04:90:0e:
9d:29:34:32:c9:9e:bc:ec:f3:3e:0f:47:dc:52:50:16:80:1b:
c0:20:d5:f8:26:1d:c0:e4:1d:af:17:7d:e2:8b:78:17:5b:c9:
0f:c1:9d:07:b7:39:fa:eb:84:2b:2c:5f:6c:72:26:af:ba:60:
47:b1:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:10 2026 by rpki-client