Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: Sz9GBKvLSnNv7C9pmdcf5noaiKuY1NA5EDDK0q6wVhs=
Subject key identifier: 60:21:7D:18:1D:57:1C:E4:CC:0A:50:A1:E0:2F:F5:D9:C0:19:BC:EB
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019E1C467863244BEAB6983D93BAE46AFE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0F9D
Signing time: Tue 12 May 2026 13:00:40 +0000
Manifest this update: Tue 12 May 2026 13:00:40 +0000
Manifest next update: Wed 13 May 2026 13:00:40 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: MHcxrGsC3/jAF087dT6P/RIj305L43jL7NJnkM9YbmE=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:78:63:24:4b:ea:b6:98:3d:93:ba:e4:6a:fe:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: May 12 13:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=60217d181d571ce4cc0a50a1e02ff5d9c019bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:ba:9f:9b:ad:ae:97:38:e6:fd:da:30:d9:
9d:eb:d1:8c:6f:7b:ab:4e:39:4f:d8:17:86:fc:d1:
5f:c0:1f:2e:6c:de:d2:24:ff:65:53:7f:90:ba:38:
aa:2a:76:86:ab:ad:a5:b6:8f:ea:11:91:5c:d6:88:
0e:5b:f4:91:23:6a:f1:03:36:02:da:fe:13:7a:a1:
74:15:c5:0a:22:f1:c6:78:b3:55:c0:4f:b7:c2:b0:
ed:5d:9b:4a:f4:97:76:7c:98:5f:19:1c:8a:55:17:
4e:52:89:0c:17:b3:94:14:56:e5:eb:30:b1:9e:4c:
9c:1e:08:a6:bd:7c:97:8e:87:58:d6:64:1a:1d:f7:
43:b5:b3:dc:a5:94:fa:99:9f:4e:1c:80:85:e0:2e:
4b:53:20:89:f0:3d:81:d4:73:ea:ea:03:ac:1f:cc:
2e:cf:45:75:70:43:a2:e0:74:41:b5:ff:2b:d1:12:
d5:66:46:e9:41:32:67:46:b9:56:4d:51:3a:0f:6d:
c6:4e:ea:45:44:89:0c:d6:d1:25:75:60:92:56:1c:
f0:52:76:91:1c:e7:38:7d:57:13:94:43:40:2f:25:
7f:65:49:9e:88:f7:67:bf:f9:75:1a:0a:8d:70:e4:
44:ca:09:64:0c:43:a3:08:ed:65:86:42:61:b6:a8:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:7D:18:1D:57:1C:E4:CC:0A:50:A1:E0:2F:F5:D9:C0:19:BC:EB
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:16:80:b4:10:6b:4e:6f:d2:97:c6:ff:60:5b:4c:d9:b3:76:
9e:d7:76:5d:be:f0:1e:a2:f0:3f:98:4b:4c:3c:2c:69:2b:3d:
63:2d:4f:98:05:90:c9:dc:8d:2b:6a:0b:08:e6:43:6b:20:f4:
12:2e:28:fd:a0:23:21:bd:00:25:52:36:87:c3:e5:61:51:59:
11:8e:c7:8e:b4:6c:63:19:76:5e:91:8c:b1:1f:55:4d:41:f7:
9f:04:70:c2:6b:dd:fa:7b:40:2b:a0:48:ba:40:28:24:b1:dc:
7f:02:f3:a6:49:9e:fa:14:e4:1c:32:0f:3e:08:62:0e:9d:24:
b9:a1:9b:9a:25:87:5f:8d:e4:67:5a:c4:59:4a:e8:09:28:ea:
81:fc:ae:db:30:b3:bd:66:63:58:56:55:34:5b:e9:b9:8a:f7:
d9:ae:55:7d:67:57:dc:5f:32:87:0a:7d:92:f9:ad:66:a4:71:
61:ae:a5:a9:9d:cf:73:69:9a:ed:ba:a6:e9:c9:47:17:73:a1:
27:1a:5a:2b:6c:b3:c1:88:9b:06:87:16:a7:da:a8:87:65:68:
aa:06:3a:a4:65:43:91:ed:e0:6a:67:01:df:d7:d5:db:42:6f:
58:4c:15:96:a6:c0:b9:e9:98:66:5f:cb:e8:fc:4d:79:a4:94:
a4:8c:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:06 2026 by rpki-client