Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: NL3KABpvAdjdeaFJizIGI6PS29JCOIl3CYgwEyjVkqc=
Subject key identifier: 4E:31:18:CB:94:72:15:C2:90:54:D0:F3:9D:C6:15:FD:C3:2C:EB:9D
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019E1C46B7371487A62D0C01B0BBDD75DCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 03B9
Signing time: Tue 12 May 2026 13:00:56 +0000
Manifest this update: Tue 12 May 2026 13:00:56 +0000
Manifest next update: Wed 13 May 2026 13:00:56 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: apU/aztpktSNXVmS8YJi+UY6VwlLdFW0TqUR+8VsBXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:b7:37:14:87:a6:2d:0c:01:b0:bb:dd:75:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: May 12 13:00:56 2026 GMT
Not After : May 13 13:00:56 2026 GMT
Subject: CN=4e3118cb947215c29054d0f39dc615fdc32ceb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:bb:b4:90:14:24:97:4c:4e:2d:38:54:c1:
fb:30:0d:c9:e1:21:d5:b9:b6:3d:bd:76:8d:fa:4e:
85:30:fc:83:9d:f5:67:69:90:39:13:e9:d5:c8:bd:
e2:1a:34:6a:72:c2:d2:26:3b:cb:be:79:cf:69:bb:
81:af:ee:8d:c7:d1:32:c0:0f:8c:15:47:23:24:17:
98:21:76:fc:f2:87:8f:2c:f5:3c:3b:76:c6:06:c0:
ff:95:75:a4:38:16:83:0b:39:0b:8d:b4:b7:96:d1:
f2:c8:85:e2:57:6a:26:55:d3:a6:47:6a:eb:2f:16:
1b:18:2d:03:51:2c:0f:fd:f1:fa:80:e6:71:86:fe:
7e:ed:5b:fe:f2:1e:8f:49:4c:23:07:e6:75:2d:be:
43:fa:ac:39:d2:02:26:58:db:74:0a:b6:7d:9d:92:
7b:66:a0:2d:34:1b:12:0a:49:42:5b:c2:59:19:e6:
c3:29:11:2d:9f:df:93:c6:62:e5:84:c6:f7:46:4f:
72:02:5b:11:7d:60:cd:ba:2d:6e:f1:7b:c8:a8:1b:
07:b5:6c:95:4f:e2:08:ce:98:e6:a2:f2:e2:56:23:
98:eb:68:d6:1d:12:7c:4d:be:9b:90:fd:10:5a:97:
45:d0:df:97:2f:ce:f2:78:db:18:ae:e2:5d:e6:3b:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:31:18:CB:94:72:15:C2:90:54:D0:F3:9D:C6:15:FD:C3:2C:EB:9D
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:ff:aa:7e:38:17:bd:00:36:91:32:be:74:d2:66:e3:8d:
95:68:d5:c7:a5:8c:4f:75:1e:a7:9b:2f:87:e6:42:64:c0:c9:
73:00:ed:85:d5:32:6d:b8:b4:16:9b:77:c9:5a:4b:16:70:b6:
f4:e9:91:48:fb:36:16:b0:b1:65:3b:cd:04:47:18:4a:d3:39:
2f:2e:7d:e8:c2:15:03:8b:46:42:9a:fe:cb:3b:c1:5d:9b:31:
42:22:fa:61:c4:81:91:10:68:aa:fb:00:a4:17:7e:bc:83:83:
79:d8:8a:af:5e:ac:df:1e:07:38:d0:50:f3:f6:c0:81:95:45:
31:db:0e:d4:83:c3:5b:be:10:5f:43:3d:49:91:e2:3e:3b:f4:
b6:6f:d4:40:50:eb:0c:82:42:ef:6e:af:3b:e8:f7:cc:03:98:
30:cc:c6:06:ae:72:c5:0d:cc:74:80:53:39:e6:56:eb:d2:67:
18:6b:4e:04:39:95:13:de:20:bc:cb:d2:39:fb:a4:9a:94:5b:
6b:cd:e1:d6:09:6d:49:32:2f:65:02:a5:ce:b5:bc:37:93:51:
69:c3:cf:27:2f:7e:3d:9f:e3:e4:39:21:f4:b6:81:e5:dd:b9:
e4:c2:19:32:3c:3c:aa:64:a1:33:1f:3b:cd:b7:06:ae:1e:34:
97:b2:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:49 2026 by rpki-client