Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: w8hJAtYjpIUYd6e2dqUWaLTwWrw5O5wLFLhUT1xvkVc=
Subject key identifier: BA:E3:C1:8E:B0:70:64:4E:09:17:76:CC:70:C4:F1:52:96:A0:6D:51
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019E1ED9DD739F3019AAC2BAE7A1B6D7BCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:54 +0000
Manifest this update: Wed 13 May 2026 01:00:54 +0000
Manifest next update: Thu 14 May 2026 01:00:54 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: kQzcmxuPGO9Q6DBPi2D/WV7ZtG7qSz17AtL9/J7j0Mc=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
3: SQYU9I8icjC1PnXxoUMPA7hZuuQ.roa (hash: os/3JTQZo5v32/YUHuB42SkbCkSG8rkSt1h0Yz40ENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:dd:73:9f:30:19:aa:c2:ba:e7:a1:b6:d7:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: May 13 01:00:54 2026 GMT
Not After : May 14 01:00:54 2026 GMT
Subject: CN=bae3c18eb070644e091776cc70c4f15296a06d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:a5:f9:d7:0e:fd:8a:ec:15:00:53:b0:bb:
94:41:cd:d5:06:bc:92:e8:09:70:8f:67:0f:8e:b9:
08:e9:55:e7:2e:8e:c4:82:b7:5d:20:f4:7d:00:95:
34:79:30:cb:62:1f:17:c9:33:30:61:20:44:ac:58:
21:f0:95:0c:b7:7e:4e:f4:aa:6c:57:b2:6c:4f:bf:
61:dd:60:8d:bd:60:69:79:24:4d:db:ce:ec:ba:f3:
17:c9:ff:88:a4:60:92:51:13:5a:d2:91:2b:d3:ad:
e2:fc:a9:6a:30:cb:3f:95:ad:3b:ce:f6:77:d1:1c:
4e:07:1e:e4:d1:86:39:08:28:5b:bf:1c:bd:77:6b:
bc:27:6d:de:1b:d2:2e:61:c6:44:dc:35:f7:d5:64:
f2:bb:b2:c3:75:3e:7e:62:df:3c:c8:30:04:d1:19:
b6:74:da:fa:8a:e8:96:6f:fb:d8:ec:d6:08:a7:0f:
42:0f:e8:43:a1:36:13:bf:5e:d9:d5:cb:8a:08:7c:
28:2b:2c:16:3e:db:aa:7f:31:e0:15:47:4e:5d:03:
31:43:2c:2f:05:28:4c:9c:1f:08:39:33:e8:39:fd:
1a:35:b1:2e:17:0a:0b:54:5e:a0:f3:b2:5f:0f:d6:
f6:f4:d8:ea:28:bb:9f:1d:73:17:fb:56:77:9f:09:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:C1:8E:B0:70:64:4E:09:17:76:CC:70:C4:F1:52:96:A0:6D:51
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:d9:6c:73:ca:dd:1a:d7:19:28:d7:fc:a1:a4:73:d4:fa:
b8:09:0e:53:c8:e1:e1:1b:f4:7e:ff:24:11:c2:7e:cb:9f:9e:
f8:dd:9b:7b:ff:54:ec:59:20:b6:3d:9b:e8:dc:f3:e8:91:db:
78:c8:0b:83:d8:6e:0f:39:99:a2:85:73:96:19:d4:e4:88:02:
40:ee:51:52:38:18:f7:17:97:7c:c2:a9:06:d0:f1:04:5c:23:
73:db:eb:7a:e9:94:60:31:1c:43:22:30:34:68:74:1c:aa:31:
fb:28:0c:01:3a:35:f3:a2:d6:64:a8:47:92:cf:28:55:9d:e6:
1f:56:11:df:d8:f4:ea:cd:24:33:62:ce:7b:9d:45:0e:ae:94:
07:e4:a5:d2:d6:71:74:53:ec:20:a6:b1:c5:7c:c3:29:e8:fa:
9e:24:89:0b:de:f7:25:3b:9d:5c:f0:e5:01:ad:d4:61:94:73:
87:42:d0:8a:ca:51:92:93:43:f7:dc:89:c4:82:ad:39:27:1c:
9d:0e:29:54:6f:9a:d6:b6:4f:6f:65:d1:3d:70:6c:aa:ec:47:
a2:df:d4:b9:01:87:f7:2e:22:2f:bd:46:57:61:55:c0:91:62:
c9:0e:e9:e5:9c:ae:50:b7:ed:29:e4:69:89:8a:bd:63:0c:b1:
4f:03:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:11 2026 by rpki-client