Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: DTwkbkygnlqbmUpcyqWl+Y+aZAxbzUGpJKOoC032Z6Y=
Subject key identifier: 91:12:64:C4:DC:CF:18:FD:E5:C2:33:E3:60:37:E0:EA:36:F5:CF:F7
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019E1F10D9CF0F039BA91EB6F4028DE21D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:58 +0000
Manifest this update: Wed 13 May 2026 02:00:58 +0000
Manifest next update: Thu 14 May 2026 02:00:58 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: 1n+kkIEruadvatfNJu862R9CLxWTxbSqaPXtd5FJbO4=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d9:cf:0f:03:9b:a9:1e:b6:f4:02:8d:e2:1d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: May 13 02:00:58 2026 GMT
Not After : May 14 02:00:58 2026 GMT
Subject: CN=911264c4dccf18fde5c233e36037e0ea36f5cff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:b4:f8:4e:62:82:7f:55:22:21:a4:cd:c5:
d8:48:f7:54:75:53:7f:8a:ae:da:24:87:00:17:43:
0e:0c:a7:78:a5:3a:01:e2:47:68:48:b9:64:97:a5:
43:92:83:73:a5:2f:58:28:af:02:07:eb:f5:41:2a:
3f:fc:83:3b:d1:00:78:7e:d8:ce:f8:ca:3c:af:74:
9c:12:22:a4:80:f8:bc:f2:fb:8c:c9:06:e3:8d:73:
90:6d:c9:9f:74:2e:3e:06:84:a3:29:01:b2:e2:1b:
29:eb:7a:a0:9e:df:a1:39:11:cc:47:b7:e9:e4:96:
a1:99:de:d5:aa:8c:54:16:cb:aa:02:6e:70:35:f9:
69:a3:e3:65:c0:8f:39:48:72:39:56:6a:74:77:11:
5b:da:d6:92:87:3b:1d:7c:5b:9f:74:7c:7e:91:8c:
f8:be:91:8d:0f:0a:2a:ab:6a:b1:9a:a3:f0:47:79:
7d:a3:89:47:04:a8:1c:5b:32:a7:cf:1a:3c:86:e7:
89:7a:b4:49:3f:39:90:4c:cd:1a:99:b9:56:be:a5:
2a:3b:13:0a:ff:11:61:e0:a7:43:d9:63:0e:a2:d0:
a8:7f:98:7e:0a:67:c2:f0:43:d7:af:ea:95:06:ad:
05:e5:bf:04:a1:fd:8d:93:e2:84:18:fc:5a:7d:a0:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:12:64:C4:DC:CF:18:FD:E5:C2:33:E3:60:37:E0:EA:36:F5:CF:F7
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f1:7b:e3:11:cc:78:ae:d0:30:f2:b8:ce:bc:7a:b0:c7:ee:
92:b5:98:ec:e1:1b:73:59:c0:f3:68:ab:44:cc:21:02:22:b8:
2f:bc:20:02:c0:61:78:18:2e:f1:f0:84:88:88:bd:a9:b7:63:
95:bb:24:36:d4:4a:96:af:2b:80:44:e3:07:a1:36:03:0a:a8:
67:2b:1d:2c:64:e7:39:6f:73:08:c7:43:e8:6f:27:83:fa:95:
34:94:d5:a7:00:62:b8:ec:e7:0f:68:2d:24:90:d7:18:85:f1:
96:e5:d6:bc:5b:52:7a:58:62:f3:9d:59:6d:6d:4d:25:fb:f7:
14:fa:b9:5e:3f:ec:4d:58:7b:b7:a4:3c:2b:e8:77:74:bb:74:
58:83:c0:46:ba:50:e2:42:c3:73:f3:f0:2f:69:74:a5:6c:7d:
7e:da:7a:c7:44:f7:76:9b:f0:30:30:c3:f8:41:b3:b6:da:71:
a0:e5:67:5e:68:a2:19:a4:d6:3b:e2:64:53:f2:f8:49:cd:8f:
bc:04:c9:b6:a7:e2:46:37:6b:40:86:99:9f:a4:a9:ec:4f:c2:
ec:09:5a:d3:3b:55:90:c4:73:af:ee:99:83:36:a8:0a:87:cc:
bf:9e:7f:1e:63:8a:22:64:fb:61:2d:97:f1:8b:9e:1c:f8:90:
da:12:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:18 2026 by rpki-client