Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: x32o02pdQsKu6oxTa92z0YC9L8QmxtEHns2+I47W4CU=
Subject key identifier: 5D:45:C4:9E:E2:17:9A:FF:BF:C6:37:02:C7:EA:84:11:8E:2D:C4:FA
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 019E1C4746999117B3B3D1A045E01F39BF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0C2C
Signing time: Tue 12 May 2026 13:01:33 +0000
Manifest this update: Tue 12 May 2026 13:01:33 +0000
Manifest next update: Wed 13 May 2026 13:01:33 +0000
Files and hashes: 1: 1-h07jUm-02q1q7k5iFHSAwPoCOY.roa (hash: wYacQ3/0cWpPvmvpOGx2amNX3ChOHhpv2IkMIQcd1kU=)
2: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: QjcB64Zr/VzcXiXsjsS+PVhfaA01vKQ3E2pFG+SIAsU=)
3: 8n9eZIW7ANGT-kZFn82_ark7Uv4.roa (hash: iSzxnZr5liuYDapFFff4VPiBs6DGqwu/5GYq/65KGeY=)
4: MbxVurKYN8xqBXt4GCcNgnfIuiY.roa (hash: x3GDjgwgD1RnHIS+Ztov3aWczXJrFL3jnbKHq3Hp8xY=)
5: bUXJJvXZD8HG86LeZV98-RJ1Y8A.roa (hash: LD+kXEg0Yv3J8X5RNHtOf1eUf3fGuk+QTSdoYbzqlLc=)
6: dTkIbbfoGWiZWY2r_Gv0Qj6ef3o.roa (hash: PRmyS7FYnGqapGRXhdp+LVcWuV+Zrh/jHa9470RQd+c=)
7: jXnaEvzPAKlwUURcuri_2EY0APE.roa (hash: bJ2+8fTTeF2ubi8NQ1u0/9fvglhy+2tBtDJvXGWQnEM=)
8: qALn9gqzSG2sWHjlwEpfBVz6XHw.roa (hash: /P0a4k08c7gRHw6tH90mR+C7VwWiM7eRL8Ct7d9zsTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:46:99:91:17:b3:b3:d1:a0:45:e0:1f:39:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: May 12 13:01:33 2026 GMT
Not After : May 13 13:01:33 2026 GMT
Subject: CN=5d45c49ee2179affbfc63702c7ea84118e2dc4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:88:5a:77:8f:9e:4d:ae:4f:e6:b4:39:ee:
05:7c:60:88:f0:08:e4:26:b6:c5:12:fc:d2:e6:92:
dd:1a:e4:4e:81:dd:29:de:24:94:05:c0:4c:cb:4e:
17:f1:af:c2:e5:b9:6b:1e:f9:50:53:45:a5:6e:d6:
8f:79:8b:d1:85:49:c7:9d:97:df:17:1d:ce:4a:99:
a6:fb:63:fa:c3:47:b9:24:d8:3f:d5:a7:ee:91:79:
71:18:d5:12:79:c2:4a:b1:0d:77:01:a4:43:82:cd:
45:9e:29:62:3c:17:d7:64:ef:03:c8:0f:8b:53:4a:
5a:c1:ce:b9:b9:b1:e2:9a:08:7c:30:7c:53:70:27:
22:6c:a7:74:c6:dc:80:08:a0:08:69:4e:4b:1c:87:
f4:bc:67:00:fe:72:6d:21:d2:b8:e1:13:3e:30:cd:
4f:b4:93:53:8d:f2:a1:fc:6f:62:42:45:12:fd:d8:
a0:ec:12:9b:ce:03:64:a0:32:64:3a:5f:91:39:50:
50:59:fd:c2:77:46:94:22:71:57:8d:4a:ae:e2:a5:
2e:5f:02:ab:ac:fa:43:78:3d:5f:82:34:6c:94:b7:
e4:f8:4a:20:f9:15:00:d3:51:16:ae:c0:62:af:14:
e9:82:5e:5a:71:c0:74:49:8c:7f:fa:b4:30:5d:8c:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:C4:9E:E2:17:9A:FF:BF:C6:37:02:C7:EA:84:11:8E:2D:C4:FA
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:1b:42:39:51:d6:7f:c2:52:7e:b9:75:7b:f4:82:e2:77:
de:15:c3:9e:2d:fb:8d:d9:29:1f:53:27:bd:e8:c4:94:4c:60:
6a:37:05:d5:7e:f6:cb:cf:80:9e:b7:56:89:61:b4:2f:94:d4:
66:63:2c:89:54:58:70:50:ed:fa:27:67:a3:0a:dd:34:4b:b6:
5b:d9:f5:ba:1a:69:2b:26:29:cf:b7:5c:f1:1a:5b:a9:62:94:
49:e9:90:25:e1:1d:71:1d:7f:52:f0:6f:eb:64:dc:42:44:c9:
8f:e9:eb:b8:5a:82:df:e9:00:fe:7c:93:72:58:16:f7:18:f7:
2f:2c:38:50:6b:44:94:c2:48:fe:30:45:61:c2:01:62:4b:ed:
eb:ff:4a:c1:14:4e:75:38:f0:71:1f:b1:f6:45:19:0f:36:b5:
a9:a1:66:8f:39:2d:dd:df:fc:a6:9e:5a:92:3a:c5:69:d6:0f:
64:75:9b:a9:c3:bc:a3:4f:cf:95:30:ae:f6:c3:b0:22:1a:b6:
33:a0:7a:96:10:91:e0:89:d7:c6:f3:15:05:9b:a0:5e:f2:78:
23:27:d1:64:ba:b5:b2:9d:6d:6d:7e:84:5c:f8:a9:12:e2:85:
94:7a:78:8a:4b:cc:b9:c7:cc:93:d9:42:1c:d4:82:b9:bd:e1:
e3:bd:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:01 2026 by rpki-client