Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: aOYyfxUcaa6luuDf7NN4jmQXbF1FOzjLwglNql1DP2I=
Subject key identifier: F5:2C:D9:0C:47:EF:4B:1B:69:F9:4E:F1:65:A2:A2:6A:3F:32:88:76
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019E1F109B54D824A30DABD887DF71377E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1419
Signing time: Wed 13 May 2026 02:00:42 +0000
Manifest this update: Wed 13 May 2026 02:00:42 +0000
Manifest next update: Thu 14 May 2026 02:00:42 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: CiXdszCHrtGhvApClcS29R1DU8dnbIyXOTJagBG4P1U=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:9b:54:d8:24:a3:0d:ab:d8:87:df:71:37:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: May 13 02:00:42 2026 GMT
Not After : May 14 02:00:42 2026 GMT
Subject: CN=f52cd90c47ef4b1b69f94ef165a2a26a3f328876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:91:64:a5:ae:60:7f:36:07:2e:4e:51:5b:
12:bf:c0:cc:ae:00:6e:8f:64:0e:00:ef:47:ee:de:
f4:ab:52:9c:f3:2b:31:df:e2:e9:9c:16:34:fc:8f:
3b:08:d4:8b:5a:ed:19:37:52:09:eb:1a:b0:8b:1a:
94:68:d7:22:64:f3:6f:0d:f1:40:64:ba:eb:a7:a5:
3e:86:e3:b3:aa:14:01:66:99:0a:ed:e2:33:16:41:
47:14:32:75:b3:67:60:24:59:19:0b:60:f4:70:60:
11:c7:a5:a3:20:7e:1d:c9:a1:87:f7:6f:01:54:4f:
c1:77:53:23:69:6a:58:9b:32:b9:eb:1f:4e:5a:f7:
3b:eb:ba:86:86:39:aa:c4:a6:c7:1d:e4:43:49:e1:
17:42:78:3b:03:bc:17:f6:dd:26:02:3c:cd:e4:63:
e2:75:6f:c5:c7:57:2d:1c:67:90:a2:8b:8d:e2:a1:
4f:13:dd:fe:cb:68:97:70:54:cd:92:94:de:ba:51:
44:12:1f:8b:dc:93:7f:54:74:f6:88:25:a5:c1:9b:
07:4b:1b:d8:36:81:70:dd:ca:c6:d2:09:cc:f8:36:
42:85:b8:75:ac:b3:40:58:d0:df:37:ef:08:45:fe:
5a:84:35:4d:c1:96:04:c4:40:bf:7e:27:c8:b8:9a:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:D9:0C:47:EF:4B:1B:69:F9:4E:F1:65:A2:A2:6A:3F:32:88:76
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a9:48:37:41:2e:38:e3:73:9d:5b:9b:05:cb:39:0c:c2:75:
a2:f3:77:67:d1:80:ed:16:aa:da:40:06:5a:98:28:97:f1:24:
a9:de:8e:fb:94:5e:8d:70:f5:78:af:02:1b:e6:41:71:fd:6f:
51:f1:1e:b1:70:1e:94:78:e9:d4:13:ce:5e:91:d3:cb:43:db:
86:ec:70:84:ca:cb:84:68:6d:a3:49:de:a4:8e:fe:43:45:3c:
4d:de:51:41:a3:8a:0f:b8:55:71:f6:6d:bc:d5:3f:c4:2c:99:
36:6f:c0:04:27:bc:a2:d2:9f:87:7e:49:9a:08:af:80:69:e9:
27:c6:c8:5f:05:54:44:ce:9d:81:25:cb:94:6a:b5:8a:ff:f4:
c0:b0:a0:81:19:e7:99:25:be:b0:a1:2c:09:b2:70:28:c0:f2:
d5:89:cc:15:7e:2d:2e:59:34:dc:fa:9d:c3:0c:d4:70:1f:b0:
0c:6b:d8:c4:39:13:06:da:58:d1:33:29:a0:f5:95:11:b8:b0:
1d:31:df:ea:c1:27:fd:fd:3b:45:cf:b4:fd:70:d6:58:08:18:
bb:64:37:27:ec:74:09:c9:e0:6d:33:df:e4:51:df:21:89:56:
b6:78:13:f4:78:6a:62:de:8b:5b:e6:fb:a8:49:2b:35:aa:d1:
cc:5c:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:43 2026 by rpki-client