Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: 594d3Q5FKsqpnDMtjYIaGBPEkt9S++5+c6qqI2KiA6k=
Subject key identifier: 0B:33:D1:8E:3A:8D:94:1A:2E:00:34:4F:97:3A:24:9D:39:71:82:BE
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 019E1CEBCFC3AE247394DBD6272D4D7CE7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: mwAz9SfUcm7tqWv80KqjnK90lMh8XyzFf/t9RR8FjqY=)
2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:cf:c3:ae:24:73:94:db:d6:27:2d:4d:7c:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=0b33d18e3a8d941a2e00344f973a249d397182be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:36:24:f6:71:ac:6b:ac:71:ef:ea:a4:b9:
3b:0f:ef:f7:df:4e:8f:28:9d:5c:c5:55:1a:5a:f8:
16:40:d7:9e:43:d6:cd:c4:aa:6d:d7:10:59:a2:86:
62:bc:41:46:4a:a4:e8:64:6b:cc:de:d1:47:0e:42:
d6:22:d5:15:b9:05:8c:22:77:50:72:8d:b2:7f:b3:
da:53:49:12:1e:04:f2:4d:4f:f7:fb:da:79:05:31:
a7:4f:b9:93:9b:36:fc:2d:27:d2:ba:71:75:1c:f4:
33:97:51:c9:b4:76:34:ac:71:67:a9:9f:24:b8:ea:
aa:75:dd:23:d5:24:6e:2f:ec:ab:23:bb:94:1e:0b:
09:3f:31:5b:d1:28:c0:4f:03:98:bd:5b:af:c4:8e:
c5:3e:5c:5b:23:6b:bc:a9:80:f6:11:21:3d:b9:a7:
4f:9d:8b:a4:7d:2e:ab:55:a6:4b:2e:81:8c:6a:2a:
af:ad:5e:0b:2a:82:e5:78:8c:1e:01:42:c5:d4:e6:
08:ff:14:c2:16:3b:3d:da:72:3b:b2:f0:02:a0:c3:
ee:51:f4:58:56:b0:17:64:21:75:70:4e:fb:ca:9f:
1c:13:29:5a:96:6e:d3:20:cf:70:1b:cb:4f:a0:62:
e3:89:c5:ad:a4:86:a4:d6:e1:8f:12:27:2b:20:67:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:D1:8E:3A:8D:94:1A:2E:00:34:4F:97:3A:24:9D:39:71:82:BE
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c6:33:70:2f:dd:1a:b7:29:94:68:b2:cf:dc:01:9d:e7:21:
22:c6:c7:ba:ba:21:b5:02:34:af:e3:37:c5:69:93:e7:50:38:
71:1a:90:04:d8:53:5e:2f:8d:8e:46:4c:80:c5:d4:3e:f6:d8:
7b:85:1b:d8:b5:56:4e:52:7a:9e:e6:7e:98:f9:05:37:91:07:
cb:48:92:e0:a9:cb:a8:ca:09:8a:e2:4b:04:fd:b4:9a:57:06:
14:8f:26:75:f3:aa:86:44:77:9e:c4:73:62:0b:49:07:5e:fc:
7c:2c:44:71:c3:b6:f2:ec:f8:72:af:ff:6f:d9:24:af:79:29:
83:40:15:e7:3c:af:79:82:7c:53:49:0c:50:d5:23:52:7c:1d:
48:7f:83:1d:b6:e3:48:b1:2b:7d:aa:47:42:29:90:a9:ac:83:
c7:cc:c1:e3:35:88:0c:96:fa:11:e7:ef:72:57:48:fc:07:c8:
bb:6d:25:d1:ad:c4:06:83:2a:72:5f:51:14:61:c8:db:0b:bd:
1b:38:0c:68:d8:84:76:30:6d:49:70:76:1a:d1:50:1d:97:db:
a8:18:08:c9:aa:a1:72:cb:ff:8b:34:dd:73:b3:ad:b1:a4:0c:
06:1a:29:5d:5a:8a:e4:93:e9:98:c9:35:c5:54:dd:58:e3:8e:
2c:4d:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:30 2026 by rpki-client