
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: 6ZWarLCV+FwCBxU3GeSIY9Yq4nVAQZB0ye3cHV8OEmM=
Subject key identifier: 2D:58:88:65:98:AB:3B:AA:F1:70:83:48:70:76:63:A8:62:75:A5:72
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 019E1C472271BED0260E7612FBF47157B529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 1243
Signing time: Tue 12 May 2026 13:01:24 +0000
Manifest this update: Tue 12 May 2026 13:01:24 +0000
Manifest next update: Wed 13 May 2026 13:01:24 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: DhiTO+Rl3dHHR7Cfch5AqTN0NTu8skYcQTF2Uo8mpjk=)
2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:22:71:be:d0:26:0e:76:12:fb:f4:71:57:b5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: May 12 13:01:24 2026 GMT
Not After : May 13 13:01:24 2026 GMT
Subject: CN=2d58886598ab3baaf1708348707663a86275a572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:74:51:c3:3d:ba:cb:15:2a:8c:0e:aa:6a:
a3:32:f4:da:68:fa:ea:94:30:e7:a4:72:5a:0a:5a:
89:aa:bb:db:f7:44:a8:08:f3:4e:63:98:d1:da:d2:
66:ac:d3:50:f8:68:63:ba:bf:81:4c:8f:17:f5:ac:
81:98:01:54:c8:e0:31:db:c9:9e:23:cf:fa:90:64:
0b:7e:f2:02:00:6f:f5:90:85:21:78:f0:1b:1e:35:
88:3c:d8:8e:66:e1:4d:9d:be:6d:43:8c:f3:0f:81:
0e:11:0e:05:a6:13:40:4b:d9:0d:1a:bd:fc:8c:4e:
a2:b0:e6:6c:61:fc:2c:22:cb:48:30:3f:47:a6:ee:
cc:10:ac:96:f9:44:47:3c:2c:b6:a1:d4:bb:e1:57:
63:8e:30:85:e9:01:ae:37:47:38:ed:ab:ec:31:4a:
99:51:22:3e:a5:c3:54:9c:58:60:b2:f8:c0:ff:45:
79:d4:92:0d:00:ba:f4:7b:b9:40:0d:a1:66:f5:f3:
b3:5a:e5:b6:67:bd:87:ed:3f:96:e7:7c:f0:5a:4b:
24:03:35:e2:27:4c:1f:64:41:03:f9:0a:e1:18:23:
c6:fa:3f:9e:73:b3:10:30:3a:21:09:b1:4b:1a:d5:
3e:47:da:08:26:d0:c6:b7:7a:d8:4b:7c:3f:14:ed:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:88:65:98:AB:3B:AA:F1:70:83:48:70:76:63:A8:62:75:A5:72
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:f5:c0:04:df:0c:81:cc:ec:9b:ce:9b:ce:a6:2c:6d:ef:
c2:c4:56:aa:df:b2:af:f9:8b:33:bd:af:0b:9d:98:db:77:df:
f2:1c:87:27:ac:11:1e:5e:ea:15:e6:84:eb:15:74:6f:66:2f:
7a:5e:16:9d:e8:af:8b:0c:bb:9a:21:53:81:31:50:35:b4:40:
61:59:13:02:2d:9e:9e:17:fa:30:a4:8e:5b:b6:87:72:a6:b7:
26:a2:cf:25:c7:f3:24:5a:65:58:ab:88:09:a2:fd:79:06:7b:
12:73:90:5e:39:67:8e:ba:e0:7c:8a:c6:d1:ba:86:3d:9f:37:
f3:aa:1f:6e:e4:1d:8c:9e:8e:63:4a:60:b3:96:fb:b2:2c:e8:
16:cd:57:77:26:51:a5:d7:c2:5c:aa:3a:52:57:de:66:68:3d:
c1:db:7b:5a:ce:06:f9:f7:a7:13:53:ef:ea:3f:1d:8c:dc:1c:
82:fd:62:24:1f:28:4c:92:69:4e:da:f8:16:d9:31:ff:68:2f:
72:9b:04:74:26:8a:3b:2c:8e:e5:5e:90:44:9d:f1:01:46:93:
7e:bc:45:70:e9:97:ca:49:fc:5e:d2:c7:d5:0e:53:e2:81:e3:
62:86:e5:8e:2d:7a:bd:42:5a:c8:ff:e6:0f:2a:5b:53:37:b0:
ec:b2:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:09 2026 by rpki-client