
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: nt5XV0trl+NTYXzV1YK+UK9aYXgVRP9H91kmO2J9g9I=
Subject key identifier: E4:7C:D9:1B:7B:45:96:A4:CB:48:29:11:FD:E0:EA:F0:16:FA:90:B2
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019E1D227CE85AB45BEA634DBDF28256B8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 17:00:59 +0000
Manifest this update: Tue 12 May 2026 17:00:59 +0000
Manifest next update: Wed 13 May 2026 17:00:59 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: KAmKQXC9p3F3OuUjQbBZBW+bL7B9IVJmzHRo2dldMNU=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:7c:e8:5a:b4:5b:ea:63:4d:bd:f2:82:56:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: May 12 17:00:59 2026 GMT
Not After : May 13 17:00:59 2026 GMT
Subject: CN=e47cd91b7b4596a4cb482911fde0eaf016fa90b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:0c:7f:b2:0d:91:3e:3c:07:cb:c1:1f:e6:
ca:ba:ba:07:1b:d9:d0:95:b0:c4:f5:40:5d:5f:4d:
1d:1b:f1:55:33:5c:96:cb:f2:74:79:ac:49:9a:0a:
99:2a:94:18:71:d4:af:b1:5a:cd:78:fa:3b:f9:f1:
a2:71:fd:ca:68:b7:5b:fc:d9:36:9c:c9:87:59:8a:
e8:e6:d0:cb:8f:7e:c7:8c:7f:62:0b:32:1a:eb:95:
09:50:9d:af:fe:a9:3c:00:90:8b:0d:7b:3c:3b:64:
bd:db:d7:09:c9:fc:49:98:12:e9:f5:2b:bd:96:f1:
b9:b4:59:f5:1f:7c:54:2b:9c:bd:35:3f:61:fa:69:
6f:56:0a:a6:14:2f:aa:a8:62:48:50:fb:41:dc:88:
91:24:ed:8f:52:ca:52:9f:bb:4f:73:d3:b7:a2:de:
d8:36:00:a1:59:5b:51:7c:7d:2a:78:fe:7d:40:a3:
6e:13:76:2e:6a:31:3d:c2:c8:75:a1:8a:52:ec:6c:
f9:0f:a7:83:1d:a4:86:bf:55:58:12:22:72:64:a8:
21:55:2a:14:43:d7:ac:96:b3:ea:52:63:c1:da:55:
1a:aa:e0:80:9c:4c:58:58:40:f4:39:0e:0a:c0:70:
7b:f4:5f:aa:4b:d3:75:cc:b4:9d:b9:e5:dd:67:32:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:D9:1B:7B:45:96:A4:CB:48:29:11:FD:E0:EA:F0:16:FA:90:B2
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0c:44:e8:2a:c6:af:46:4d:66:13:3d:db:2b:72:ef:83:67:
96:8a:40:75:55:04:b4:32:43:ca:15:0b:46:e2:38:be:cd:d3:
d5:2d:87:b2:92:53:4f:33:ed:83:4e:a2:6d:cb:e5:b9:af:5c:
a1:bf:35:54:14:7f:3c:9b:77:b9:d4:eb:f9:3f:37:e0:94:68:
55:98:d3:47:55:2e:bd:c0:65:9d:cf:fe:70:13:6c:47:3c:0b:
5f:3e:1c:91:0a:1e:fa:df:bc:bc:1e:75:97:1b:f1:8c:66:a9:
46:b0:36:a1:6c:90:70:99:4f:c4:2e:b1:46:e0:0a:0e:1b:d6:
b8:c8:1e:e1:7f:f1:ad:c8:24:d1:a7:6f:ac:1c:26:27:64:d8:
5d:d0:03:2c:24:0f:ae:2c:92:75:d7:31:2f:73:83:5c:28:7f:
f5:80:7f:d8:f7:18:59:fa:d7:12:4f:81:f5:dc:ce:94:75:c8:
d4:6c:d3:e7:6d:60:9a:01:0a:d3:b8:a9:9f:1c:e6:ae:12:b8:
f6:79:60:be:97:8b:1d:0a:93:96:bb:2d:50:63:90:10:cd:a7:
92:54:e4:2d:f5:cf:c3:a3:7a:1d:28:7e:78:a4:c5:bd:b9:ff:
f9:9f:df:93:5b:a8:bc:9c:b4:92:1e:76:1d:cc:57:f5:33:74:
7f:e1:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:35 2026 by rpki-client