Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: y1m8bcqjcQQ3OMSoAE/D7OlG+9OY2ZES4yBWmK7OTJc=
Subject key identifier: BF:2A:63:45:4C:4E:3B:AC:DC:91:9C:AC:5C:B9:06:90:D6:2E:3F:E9
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019E1DFEA2AF95785EFCE031D6153891E116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:27 +0000
Manifest this update: Tue 12 May 2026 21:01:27 +0000
Manifest next update: Wed 13 May 2026 21:01:27 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: drem+TTwfVXMMbvqWhcOvYr0T7Ew7D8i/cOXihdM6rc=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a2:af:95:78:5e:fc:e0:31:d6:15:38:91:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: May 12 21:01:27 2026 GMT
Not After : May 13 21:01:27 2026 GMT
Subject: CN=bf2a63454c4e3bacdc919cac5cb90690d62e3fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:e2:3a:c5:aa:9c:3b:2e:87:71:5b:c6:8e:
13:c5:ab:96:c0:2f:25:d9:e3:ee:8b:68:21:1a:e6:
d8:7d:1b:40:dc:06:91:1d:64:8c:56:62:d5:56:17:
18:48:0d:07:e5:04:57:c5:d6:e0:84:d0:85:b3:3b:
9b:33:e1:0f:53:c3:d9:39:6e:86:e6:50:5a:65:15:
6b:2a:4b:14:4b:8c:7a:33:56:46:15:56:9f:f7:dd:
72:3e:72:cf:dd:69:f4:39:8f:66:ca:ec:bc:32:58:
a9:c6:11:e3:ee:ed:8f:a7:d2:cf:44:f6:8e:fb:79:
d3:6f:22:61:19:53:11:0e:32:71:cd:e1:67:13:6f:
4c:4b:c2:c6:3e:ba:e5:07:ad:9d:be:36:39:81:a1:
26:0c:29:a7:c6:5f:6d:b5:e2:36:c6:39:28:8d:a0:
5b:c3:87:5a:75:79:4f:a7:ee:64:2f:43:7f:68:0b:
dd:ab:be:19:ba:20:de:3a:9a:25:76:d2:75:8a:9a:
15:63:68:ae:56:8a:d2:71:f9:e2:f3:fc:b9:42:6b:
2a:33:d5:b8:71:d0:87:28:32:74:62:b7:3a:f4:1f:
31:41:d5:03:f5:33:e7:0d:ba:68:76:8c:32:30:90:
4c:05:d0:2c:2a:b5:b1:4e:83:de:b3:cc:b3:47:a6:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:63:45:4C:4E:3B:AC:DC:91:9C:AC:5C:B9:06:90:D6:2E:3F:E9
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3a:d6:38:44:c3:93:89:9c:b5:a8:cc:1c:8f:87:e8:65:b2:
56:db:72:64:5a:1d:bd:28:fe:69:4e:27:ce:df:74:4f:9f:fd:
e9:6a:61:ce:8a:75:9b:8c:61:67:f7:ed:10:4c:a4:8d:54:6f:
20:33:49:76:d5:40:9e:ae:81:ab:84:8a:24:00:75:6b:84:6c:
4a:c5:eb:24:10:15:92:2e:62:bd:00:e7:86:46:e9:ce:e2:9d:
71:5e:fc:c6:42:6c:04:3c:6d:99:9e:87:b5:07:f4:93:53:ef:
1b:16:be:2c:c9:ad:98:f6:34:99:2b:07:89:59:15:a5:3a:5c:
ef:b2:ba:c8:24:59:b0:92:79:0f:2c:12:02:3d:90:28:e5:df:
99:45:e8:41:27:67:c1:59:c1:79:36:fa:d9:3f:5d:a0:8f:3e:
93:30:29:fd:50:2a:cd:7e:01:6f:6e:52:34:6d:76:46:03:5c:
25:56:b0:d2:94:c4:fe:98:3e:2d:c3:d7:74:51:f6:87:f7:18:
90:21:4e:c8:86:05:fc:ec:58:e3:a8:db:c2:26:d5:d3:f5:4c:
2b:0b:74:b7:a1:1e:df:a9:57:38:20:d4:fe:2e:bd:bc:b2:0d:
16:58:49:1d:18:48:a9:4a:5e:44:d8:8d:b6:ba:51:ca:23:5f:
3e:ff:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:14 2026 by rpki-client