Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: QY/CPL1RAZSUTrSuVQvw8zez5iRWsYiduCoBRmhyoLc=
Subject key identifier: E4:4E:B2:3B:33:EA:15:1E:A7:B5:31:3E:E9:8B:CC:88:70:2E:8C:EF
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019E1DC7417DC4043ECAF4F298900033FE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 20:00:57 +0000
Manifest this update: Tue 12 May 2026 20:00:57 +0000
Manifest next update: Wed 13 May 2026 20:00:57 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: AO/N+Rd9yy2pAEL1iBArASco3JoXs0rUAZdXILOj28Q=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:41:7d:c4:04:3e:ca:f4:f2:98:90:00:33:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: May 12 20:00:57 2026 GMT
Not After : May 13 20:00:57 2026 GMT
Subject: CN=e44eb23b33ea151ea7b5313ee98bcc88702e8cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:d0:65:0f:8a:12:3d:d4:17:1e:6b:e2:7d:
70:c6:6e:ad:44:aa:3f:cf:28:fb:cf:2b:c2:ec:06:
72:d3:0b:48:2c:bb:00:4e:6c:e6:c0:1c:7d:44:7a:
a7:98:33:9b:7d:ff:ca:9f:14:d7:6a:b5:6c:4b:56:
26:ff:28:eb:05:9d:3e:9a:1d:5b:cf:04:81:a5:fd:
00:d4:aa:58:52:0c:2d:61:f3:1a:c4:26:7f:22:51:
82:e9:50:89:af:7d:5a:19:27:ca:bd:6f:96:80:c1:
4d:cb:eb:70:02:cd:06:77:37:03:28:63:83:cd:48:
41:e8:28:d8:51:d4:d9:f8:fd:b6:1e:bd:96:71:80:
8a:0b:02:c4:bb:dd:ef:b0:95:8e:80:f7:ae:22:98:
0b:22:67:d5:a5:18:5e:b2:18:92:cf:17:a7:bc:12:
f1:7f:7c:69:81:30:f9:1a:be:9e:98:74:91:c4:cc:
95:78:2d:1b:a1:7c:b1:f8:81:f3:f6:df:38:d6:d6:
72:00:bb:00:8d:01:a5:57:d7:49:20:e4:49:b5:71:
3e:22:2f:85:21:99:97:5f:37:fa:a6:98:1a:de:53:
d5:1f:4a:b0:ee:df:d7:c1:23:77:fe:d1:a1:ae:c0:
38:6e:5e:f4:4c:66:e3:d8:d9:0d:b1:d0:f1:53:bc:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4E:B2:3B:33:EA:15:1E:A7:B5:31:3E:E9:8B:CC:88:70:2E:8C:EF
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:e2:4f:c7:15:9c:b7:63:24:da:ec:79:99:17:55:3f:30:
5e:ef:18:cb:33:62:62:3f:48:52:a0:1b:98:94:a7:68:30:7c:
25:ab:03:02:b7:3f:7b:a5:d6:90:49:99:f2:bc:48:56:ec:38:
90:b8:1f:e2:f5:72:3f:71:a7:25:3c:43:f3:2f:de:be:74:ba:
61:d3:86:57:1f:e8:0c:43:8c:c4:12:1b:c4:ef:21:ae:b4:10:
fe:ca:61:62:f9:d8:ff:ca:2c:0f:9a:cc:a3:49:51:35:a5:9a:
38:42:12:4d:ae:ef:4f:41:a5:88:0a:a6:fd:07:ad:42:c1:1d:
2b:49:17:c3:5b:01:12:65:88:88:e0:49:7d:04:e5:53:04:67:
05:5b:e8:30:c0:61:b0:eb:bc:ab:6d:83:f2:92:21:c5:a7:b5:
08:b2:45:fe:1c:1e:4d:4f:a9:1f:09:0a:87:c7:fa:45:b5:97:
27:82:f4:67:b2:55:5f:e9:cf:98:24:fb:ae:e4:51:a1:a0:30:
b1:20:54:e2:2a:e1:5e:61:9e:e1:97:0f:78:da:5c:c0:fe:77:
47:e7:b5:d9:86:9e:27:d1:cb:20:9e:97:ff:a3:50:46:17:49:
22:85:36:f0:df:3c:96:b7:2a:76:76:e3:1c:f8:59:f8:c4:7d:
b0:d3:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:06 2026 by rpki-client