
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: +/AU0PmSu3DzoiF8vmDS5Cspf+pJ1x0/TUpXKILizwE=
Subject key identifier: BD:12:42:0E:F0:27:BD:93:2C:6F:95:20:43:6D:7F:BF:1B:A2:EF:46
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 019E2023AA2D3F711058BEDFEE6157728BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 07:01:08 +0000
Manifest this update: Wed 13 May 2026 07:01:08 +0000
Manifest next update: Thu 14 May 2026 07:01:08 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: ohD2Ri52qXltmF0FUAfFiEIwxktidlftsm6SFOSwmKI=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:aa:2d:3f:71:10:58:be:df:ee:61:57:72:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: May 13 07:01:08 2026 GMT
Not After : May 14 07:01:08 2026 GMT
Subject: CN=bd12420ef027bd932c6f9520436d7fbf1ba2ef46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:2f:f8:12:a6:3a:fa:4c:ae:cd:aa:dc:7c:
64:ab:dd:99:ac:c7:1c:77:46:ee:06:7d:ac:73:0a:
88:bd:ca:1a:fd:bd:f0:e7:93:c2:5f:37:93:9b:e4:
9f:b8:76:57:aa:fc:7e:2a:b5:15:29:08:4a:e2:3f:
db:dc:f5:b8:c2:73:2c:4b:91:c9:15:8b:9f:37:39:
db:90:22:7a:a3:47:18:39:5e:17:31:62:54:b7:b2:
21:1a:be:c0:a2:80:35:36:04:21:cf:94:c8:27:42:
58:e8:2e:34:41:96:44:ac:55:cb:f4:60:e1:a8:3b:
d8:ec:7e:c0:4c:1f:3a:d0:97:0e:4a:38:4b:4a:8e:
49:9d:90:27:7f:b4:9d:f1:47:c1:fb:42:c8:e6:0e:
17:be:9e:65:1c:a8:46:1f:86:ff:44:de:e7:70:6f:
8c:69:fb:42:7b:b4:30:68:42:c3:69:a9:da:0f:f7:
fc:44:81:f4:24:16:6c:95:6c:3b:30:ee:6e:ac:4b:
f2:94:55:1d:e8:cd:ca:0c:61:93:67:78:11:56:72:
63:7c:17:2e:68:79:8f:81:47:e3:c6:d6:25:3d:c0:
8d:d2:b9:02:2a:2e:9f:e4:ce:b0:3a:32:95:85:5b:
3e:ae:89:27:00:c8:d9:c8:a9:a5:03:d3:ee:b0:29:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:42:0E:F0:27:BD:93:2C:6F:95:20:43:6D:7F:BF:1B:A2:EF:46
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3c:ff:e2:8f:f8:e8:50:52:2f:a5:2d:cc:d7:14:19:ee:85:
6e:38:2d:36:26:ab:0e:26:c6:ba:aa:0f:a4:9a:68:4a:ef:c3:
10:65:0e:09:18:0b:9f:bb:3c:38:c4:8e:70:66:3a:32:5d:73:
81:cc:a4:12:29:88:41:4f:fb:3b:4e:86:fd:7f:f5:12:98:c2:
be:df:7e:21:40:72:fe:a0:86:a9:76:b0:35:1c:48:b9:23:c8:
ff:28:f4:65:99:a9:5a:0d:65:fd:03:29:84:a6:dd:f8:46:ea:
96:fd:67:f0:bb:c6:ee:f1:53:93:b5:45:90:b7:f2:ed:35:fb:
f4:5c:ec:78:ad:cc:9f:16:5f:c0:d1:23:c0:7c:ed:49:0c:66:
d4:82:c5:69:f6:df:ab:e0:b7:6b:4a:9b:74:ee:2c:63:d4:db:
d7:23:0d:d7:56:fa:52:ae:dd:4f:33:a1:f1:df:17:c2:5f:c7:
44:d1:bc:76:cc:cc:95:bb:65:20:fd:e4:e8:5e:82:c3:6a:60:
37:c8:4e:e1:da:4a:84:80:7a:6c:58:d4:7a:f0:84:84:55:a9:
a1:82:59:f4:ee:a4:d7:0f:31:0d:70:15:ea:e0:8f:ac:5b:0b:
4c:3b:5d:f1:61:ab:bf:0b:5b:43:d2:ef:30:2d:77:85:da:05:
58:93:ae:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI6otP3EQWL7f7mFXcovlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjYwNTEzMDcwMTA4WhcNMjYwNTE0MDcwMTA4WjAzMTEwLwYDVQQD
EyhiZDEyNDIwZWYwMjdiZDkzMmM2Zjk1MjA0MzZkN2ZiZjFiYTJlZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsEv+BKmOvpMrs2q3Hxkq92ZrMcc
d0buBn2scwqIvcoa/b3w55PCXzeTm+SfuHZXqvx+KrUVKQhK4j/b3PW4wnMsS5HJ
FYufNznbkCJ6o0cYOV4XMWJUt7IhGr7AooA1NgQhz5TIJ0JY6C40QZZErFXL9GDh
qDvY7H7ATB860JcOSjhLSo5JnZAnf7Sd8UfB+0LI5g4Xvp5lHKhGH4b/RN7ncG+M
aftCe7QwaELDaanaD/f8RIH0JBZslWw7MO5urEvylFUd6M3KDGGTZ3gRVnJjfBcu
aHmPgUfjxtYlPcCN0rkCKi6f5M6wOjKVhVs+roknAMjZyKmlA9PusCkAyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0SQg7wJ72TLG+VIENtf78bou9GMB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTz/4o/4
6FBSL6UtzNcUGe6FbjgtNiarDibGuqoPpJpoSu/DEGUOCRgLn7s8OMSOcGY6Ml1z
gcykEimIQU/7O06G/X/1EpjCvt9+IUBy/qCGqXawNRxIuSPI/yj0ZZmpWg1l/QMp
hKbd+Ebqlv1n8LvG7vFTk7VFkLfy7TX79FzseK3MnxZfwNEjwHztSQxm1ILFafbf
q+C3a0qbdO4sY9Tb1yMN11b6Uq7dTzOh8d8Xwl/HRNG8dszMlbtlIP3k6F6Cw2pg
N8hO4dpKhIB6bFjUevCEhFWpoYJZ9O6k1w8xDXAV6uCPrFsLTDtd8WGrvwtbQ9Lv
MC13hdoFWJOuGg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:04:11 2026 by rpki-client