Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: OAhMbWfrjCpGyc2kFx3c4kWBAEo2ez0Km+nSbFDb1lE=
Subject key identifier: 85:AF:C2:0D:72:14:96:C8:77:EE:51:0B:76:47:48:05:7A:CC:32:07
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019E1FB5642C756E6FE0A09664FF05091D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: 6vhK4YhsgC0ney+woxbuOLPfqJQq/9m06Zzqt1GybLs=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:64:2c:75:6e:6f:e0:a0:96:64:ff:05:09:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=85afc20d721496c877ee510b764748057acc3207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:ae:71:ae:bc:42:2c:d5:fd:4b:d1:3f:f9:
3a:d7:56:ea:08:4f:80:a2:c5:f7:3c:ba:d4:59:72:
29:8d:e1:dc:7c:bf:27:0a:9d:2d:06:a1:2d:35:d9:
23:9e:a5:07:e0:7f:ab:0d:4f:95:c8:0f:4e:68:cb:
f9:ab:a2:01:6a:3a:c8:c3:cd:63:c0:50:16:08:ae:
22:53:07:d3:cb:31:9e:6c:9e:22:b7:ef:82:8e:41:
f2:a5:1e:47:c5:39:49:0a:d4:4c:ba:a4:d2:71:d5:
fb:36:d4:84:cb:d4:91:1d:3b:a0:97:98:49:be:df:
a6:58:1e:87:5a:db:09:3b:59:27:51:f7:18:77:5e:
24:99:b1:27:bf:57:f4:64:65:60:91:5b:24:70:eb:
6c:60:93:70:3c:a2:05:ee:15:7a:04:90:50:e2:1f:
d3:44:0a:52:40:23:7c:50:47:ed:36:e3:5d:f2:12:
78:7d:ac:53:d8:47:fb:93:b6:c6:1f:4c:65:6a:e6:
2d:26:fe:4f:23:bd:67:86:95:43:3c:bb:89:84:10:
48:12:44:82:45:09:2a:de:a8:bf:f6:da:d4:f5:dd:
8d:21:32:8d:c7:a2:03:d9:07:41:3c:87:41:60:46:
35:33:9d:b6:72:64:45:8c:c6:0b:9a:8b:c0:8f:b6:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:C2:0D:72:14:96:C8:77:EE:51:0B:76:47:48:05:7A:CC:32:07
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:99:dd:57:73:49:fe:a8:00:c0:b7:87:47:36:8d:90:1d:
5a:fb:65:e3:02:48:f5:4f:b6:e1:eb:65:31:a7:2c:5c:6c:72:
65:53:cc:15:fe:c3:89:ea:86:da:c8:61:e4:3d:7f:4b:ca:bd:
64:8c:d5:c4:1f:8e:ef:e1:59:73:a6:ba:57:cf:7e:2c:55:ab:
df:8e:14:4a:83:a0:65:2a:eb:bf:12:59:fc:ec:e8:a0:16:f6:
6a:1f:c6:9a:cd:39:23:25:3f:e1:6c:13:18:9c:9c:e2:10:89:
70:1d:55:e4:01:48:43:33:a6:66:1d:ca:c7:60:9c:d6:7d:ac:
ec:ae:b4:d1:08:95:55:92:25:db:ae:6d:6c:67:fd:e0:6f:f4:
75:6a:20:01:b6:e5:c5:a7:5a:17:92:69:12:80:11:87:fc:13:
8a:79:e8:35:d4:33:ab:0c:d0:b5:dd:db:1f:fe:98:c7:8d:33:
6d:aa:84:1b:59:66:ad:2e:6d:f7:84:fe:c4:af:4c:15:e9:5a:
0a:5f:55:56:93:f5:41:15:18:96:16:62:4c:22:16:69:e8:01:
96:63:d1:38:fc:d9:00:84:83:0d:9b:59:ba:8a:6b:be:7e:90:
54:b8:4d:0a:44:e4:6b:56:60:58:91:ad:7f:b7:fa:40:09:d4:
90:aa:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:21 2026 by rpki-client