Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: BmZW/R1+FbvSYcWjSp0lsSNy8vtrZh/7rlSi4pDjPDU=
Subject key identifier: 93:B7:DC:DB:01:16:F7:45:14:E1:B9:B1:C6:0C:46:EB:04:F5:29:E9
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 019E1C47A79101A605A4847F53BF411F6220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0C61
Signing time: Tue 12 May 2026 13:01:58 +0000
Manifest this update: Tue 12 May 2026 13:01:58 +0000
Manifest next update: Wed 13 May 2026 13:01:58 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: vgk+iiRt5gqNHardutUepk9mj/X5e3JNi9B854XKCPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:a7:91:01:a6:05:a4:84:7f:53:bf:41:1f:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: May 12 13:01:58 2026 GMT
Not After : May 13 13:01:58 2026 GMT
Subject: CN=93b7dcdb0116f74514e1b9b1c60c46eb04f529e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:f7:b4:cf:33:e0:cf:75:3c:7a:51:87:7a:
b7:a8:f3:41:b0:a9:45:2d:2b:98:eb:1d:3a:1c:f8:
31:a2:c1:d9:6b:ad:41:52:ac:6e:86:cc:02:01:73:
ec:11:a5:65:22:5e:c0:2f:c3:d7:13:3d:13:31:1c:
1b:e7:a4:da:30:10:f9:b3:4c:02:e4:f7:49:f6:ad:
3b:c8:84:17:cc:e2:a7:95:32:d5:37:04:39:db:63:
64:20:ce:42:ef:aa:8c:15:15:36:7d:9d:fb:8f:b7:
f2:28:b1:e9:84:50:9f:c3:65:68:b0:19:88:25:c7:
6e:db:ee:59:39:a5:57:e1:0c:11:1b:80:f2:89:23:
b3:69:37:11:72:57:cd:1f:82:ab:e8:ad:64:e3:9b:
65:9f:a4:14:ec:d8:22:ec:a8:5d:1f:68:3d:b2:49:
6e:44:7c:0d:76:0e:03:0a:15:24:5a:4d:7d:d0:5a:
7f:08:a0:ab:a8:3c:18:2e:d2:ab:48:68:17:e0:59:
15:09:22:f3:46:90:b7:d5:9d:c7:14:d7:97:dc:77:
31:ac:40:22:82:20:4f:7d:3d:89:9f:06:d0:56:25:
e8:4f:19:b3:b4:e9:e8:b1:9d:9a:04:26:a7:2e:f2:
5b:72:f3:ab:39:b2:54:a1:8a:a2:fd:0c:06:56:6c:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:DC:DB:01:16:F7:45:14:E1:B9:B1:C6:0C:46:EB:04:F5:29:E9
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:f9:4b:22:7e:5c:92:74:55:7e:70:6e:34:47:8b:fb:e5:
be:d3:ed:83:f1:9c:f3:41:87:e2:08:ea:fd:07:b8:05:92:86:
3f:09:61:95:66:18:a7:92:35:59:47:ab:3d:d1:56:7f:db:21:
b9:f1:39:50:b7:de:73:7f:71:b0:8c:2d:f9:ec:6e:44:5e:7d:
d5:d8:6d:9e:09:85:8c:b8:30:89:72:24:d2:8f:ef:9b:9d:25:
6c:8a:53:f8:04:6f:91:31:f1:13:3f:d5:9e:5b:ad:07:de:c8:
ec:df:d4:b1:89:a8:b0:5c:0f:13:82:fe:d5:d9:bc:60:5c:15:
9f:77:74:2f:51:78:f6:e9:19:2c:e9:e4:b4:ae:85:1a:22:fb:
85:59:fb:30:22:f2:91:18:83:a1:fa:2d:77:13:0d:b5:4f:fa:
83:ce:ec:cd:fa:9b:50:46:03:46:ae:46:a9:2a:d6:5c:d3:9a:
60:01:88:74:c5:85:7a:bb:43:fc:34:15:c0:af:9a:52:82:e4:
32:af:4d:db:b4:97:72:e0:2c:5b:1f:42:f5:29:46:8c:25:74:
ff:9f:08:b9:df:f6:c5:6c:77:64:cb:57:68:f9:09:73:a3:2a:
1a:53:40:ea:60:ee:cb:fd:97:8a:35:ba:81:68:46:5a:3a:6e:
71:04:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:08 2026 by rpki-client