Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: Zm55dTBZiY3roK6U8Wg7CxRtFuJI0zPaSSlIznfmLsQ=
Subject key identifier: 56:13:6B:D3:F9:1D:D4:26:D9:27:D0:76:69:1B:F3:67:8D:EA:36:00
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019E1E34EE6535E6E0555F55FD6D60714772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 17E7
Signing time: Tue 12 May 2026 22:00:45 +0000
Manifest this update: Tue 12 May 2026 22:00:45 +0000
Manifest next update: Wed 13 May 2026 22:00:45 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: h2BfV9/moO1JM/O8lgh/mXKVobZExn8yxNhzz6OEbOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:ee:65:35:e6:e0:55:5f:55:fd:6d:60:71:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: May 12 22:00:45 2026 GMT
Not After : May 13 22:00:45 2026 GMT
Subject: CN=56136bd3f91dd426d927d076691bf3678dea3600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:69:7f:74:15:e4:1a:5e:21:f1:2f:0d:05:
51:1a:28:6b:0f:95:4f:8f:52:a3:c8:b7:4c:dc:10:
bb:2a:63:91:84:90:78:7c:13:1c:d1:22:02:7a:db:
cb:67:bb:b8:c4:58:1e:a4:bd:a4:2b:77:24:54:7d:
37:13:a6:37:6b:0d:63:2c:d8:0f:fb:a8:bb:9d:7e:
ed:99:fa:a9:95:28:25:2d:da:1e:0e:39:29:56:33:
d3:18:db:6d:0e:b6:38:fc:c5:a4:eb:3e:ed:29:3a:
3f:d1:d8:d2:b1:49:72:d9:53:27:a8:6b:e4:b7:d5:
4f:65:7d:3b:4b:4e:fb:a5:a6:8d:d6:b8:66:15:be:
b8:60:46:cd:fc:31:d8:68:17:6b:60:9b:93:ac:fa:
fc:12:65:75:be:dd:50:78:23:04:9c:52:8f:9d:79:
36:9c:b3:7c:49:bc:2a:02:0e:c9:2e:34:f5:ad:2a:
7e:f7:4d:79:d5:2f:8d:c4:7d:b0:7b:02:c0:e6:3f:
52:0f:db:f2:ed:a1:6f:80:e2:1a:5e:26:d7:30:52:
83:e5:6c:27:7d:71:98:cd:e9:fb:8a:f7:ee:bb:3a:
d6:b1:24:b7:61:64:aa:7d:03:28:47:46:04:40:ad:
4a:51:f7:11:1e:b0:99:76:f5:bc:27:0d:21:b9:c0:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:6B:D3:F9:1D:D4:26:D9:27:D0:76:69:1B:F3:67:8D:EA:36:00
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:de:65:13:27:9c:3f:58:d6:de:bf:72:8b:4f:00:73:0f:
04:60:c7:cb:61:04:3d:ea:0f:2b:d0:57:53:c9:1b:b9:4d:6b:
61:a9:f8:0a:8e:b6:6f:81:86:a9:e1:31:bc:9e:36:4f:fa:7e:
c6:0b:3a:0b:2f:4f:44:af:ab:52:5c:e4:43:78:18:52:b8:e1:
8f:e9:e5:84:a4:67:b2:0e:59:49:7d:3e:55:6c:fa:a9:15:45:
51:f6:1a:92:f7:6b:70:97:8b:26:cd:c1:a2:95:93:95:39:8b:
fa:b1:4b:e2:f8:77:1c:46:d8:6d:a4:38:6b:69:26:dc:c2:07:
2c:38:db:41:ce:32:b8:0f:78:64:d1:7a:95:28:65:c7:72:dc:
40:c2:ce:f7:26:b9:f2:ba:bf:90:10:0f:be:1d:2e:e7:8f:e3:
9a:3d:58:65:f8:91:19:40:45:84:e8:63:cc:11:3c:1f:d7:d6:
83:17:f0:49:35:9d:41:97:65:d7:c9:c8:53:4b:9d:1a:4b:aa:
57:64:a2:00:1f:eb:5d:85:01:62:28:21:74:cb:aa:d4:18:18:
d8:3e:23:1e:d5:0b:2e:83:57:2a:5d:bc:eb:51:d8:d7:91:df:
ed:4f:ca:10:4f:8e:74:c0:b7:78:94:57:91:59:53:89:7a:f0:
25:c0:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:42 2026 by rpki-client