Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: iiwTBc4rTo/pbSwR2KDfPk0znitXoMFfAIt+cyUvIGc=
Subject key identifier: CA:20:3D:ED:C5:C6:8D:DB:16:46:93:FC:DB:51:EC:C8:62:5F:48:08
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019E1CEBCF293A3EFABC80ACB0D0C6C4A28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: HAFcGJY7agWko4KNcLhRaSCF/pPMU43qoV3piT1D57A=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:cf:29:3a:3e:fa:bc:80:ac:b0:d0:c6:c4:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=ca203dedc5c68ddb164693fcdb51ecc8625f4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:66:3c:11:b0:07:e8:37:8a:f6:08:33:39:
c6:d1:90:fc:88:1a:0b:e5:cd:fb:ce:99:29:ae:6e:
ac:a4:09:c2:7a:2b:34:e5:fb:d8:f1:2d:9f:32:9a:
7d:ce:8d:7c:dc:5e:d2:0a:34:3d:08:b9:50:c2:95:
79:74:91:62:30:cb:3d:58:93:e5:c3:b1:b8:af:4c:
56:fa:a4:d6:a3:8a:43:68:99:e0:f8:6e:6e:7f:33:
d7:d5:f8:dd:1e:76:fc:25:b8:bb:b3:e4:c0:bb:c5:
30:db:97:05:89:cb:73:9d:c6:85:cd:b4:ee:0a:a5:
df:9b:66:1f:31:99:84:16:db:4d:4a:09:7a:9f:77:
f5:1a:b4:89:92:0c:e7:62:e6:b7:ac:b0:d5:5a:f5:
ef:42:4e:87:1b:0e:0a:21:61:5b:81:5c:0e:c1:b1:
2c:42:12:21:12:5a:8e:d2:6a:d5:2a:80:c3:5b:f9:
69:82:99:bb:6e:ac:c1:e3:2f:db:e3:df:7c:78:b0:
04:c2:d3:f0:dc:a8:76:4b:8b:4d:5b:1c:92:ae:fc:
2d:40:3b:ea:84:23:3e:2d:0b:9a:72:8c:8a:07:99:
29:93:52:26:84:9a:7b:b2:99:85:4c:41:77:a2:b5:
3c:18:ee:b3:05:ea:f4:9e:b6:8a:e8:e9:96:cc:60:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:3D:ED:C5:C6:8D:DB:16:46:93:FC:DB:51:EC:C8:62:5F:48:08
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:e4:c1:61:05:72:b0:e0:e2:18:04:76:2e:f1:bd:9e:c8:
e1:f6:84:45:30:e7:38:8e:4a:7d:b9:80:f0:79:c1:bc:ff:e3:
f1:85:f6:b6:7a:6f:a9:89:5e:3e:7d:8c:be:a7:a5:d4:2f:a6:
90:10:bf:15:8f:bd:b7:e2:35:57:9e:e3:4e:08:43:84:27:fd:
36:c4:8f:24:2c:86:82:69:f6:8c:91:e7:75:bc:ae:9a:49:ec:
4c:c1:ff:ff:d0:5c:27:f4:fd:ec:02:34:e1:f6:52:e6:83:24:
83:e1:b6:80:15:0d:04:ec:1b:46:a6:e3:2a:d5:aa:89:88:98:
c6:9f:dd:64:ed:4d:05:27:f1:f0:91:ab:dd:dd:57:24:b9:ce:
67:b4:b7:c6:79:22:40:b4:e8:22:28:38:1c:d2:61:bc:7a:15:
ba:4c:75:1c:28:46:ae:35:4e:b0:8b:ba:6d:b1:af:c1:6b:25:
45:d0:63:bf:55:2f:96:ff:8e:2d:7a:07:0c:ec:6f:78:41:34:
08:50:05:54:56:a5:ff:6c:ec:df:fe:86:43:35:1e:7d:5b:38:
d8:ff:74:8f:8a:a4:7f:53:5b:e2:41:b2:33:0d:0a:c8:13:c5:
a7:51:83:ee:24:c5:fa:b2:94:1a:2c:ae:62:f4:67:f5:e6:2d:
29:7b:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:03 2026 by rpki-client