Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
File: 3OXgIlmwLxipnQnkvc5BnGrgo7g.mft (raw, json)
Hash identifier: 0CwCyBBk1r4RQ/FXc17yTO3Ri9mGbaeOtwrtFx78/vY=
Subject key identifier: D1:F4:2B:95:09:C7:6D:AA:D5:46:DD:7C:6F:83:72:C8:7A:7A:20:3B
Authority key identifier: DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
Certificate issuer: /CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Certificate serial: 019E1C7DB1D2B3C75D16C843FFFE92047BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
Manifest number: 3D
Signing time: Tue 12 May 2026 14:00:59 +0000
Manifest this update: Tue 12 May 2026 14:00:59 +0000
Manifest next update: Wed 13 May 2026 14:00:59 +0000
Files and hashes: 1: 3OXgIlmwLxipnQnkvc5BnGrgo7g.crl (hash: DqfqP6H1c1+xaZfwlaDLagaesPGAf0lDdHzSDZrw0X4=)
2: dzwsdq_p19qeWq1sVjAo8n8DF3A.roa (hash: ypz0q9rJFOFUluO/EXbahQLlxxipPvEZdWT5c5RYe/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b1:d2:b3:c7:5d:16:c8:43:ff:fe:92:04:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Validity
Not Before: May 12 14:00:59 2026 GMT
Not After : May 13 14:00:59 2026 GMT
Subject: CN=d1f42b9509c76daad546dd7c6f8372c87a7a203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:ff:61:0c:73:38:11:82:bd:55:76:4f:a4:
e6:dd:b0:27:fc:43:df:f5:c6:d0:2c:c0:15:20:7c:
7f:1d:0a:f0:9b:47:e7:55:1a:bf:0e:5f:03:5a:4b:
a6:e5:cf:e4:4e:ae:09:56:c7:dd:91:e2:0b:74:4d:
97:cf:66:40:23:9b:2c:ac:8f:88:82:32:40:ba:ed:
27:42:e6:f1:9c:21:b2:55:01:7e:bd:85:be:c9:81:
f5:8d:06:ca:3a:40:f5:54:0a:d1:a1:2e:16:f5:90:
f0:13:3f:44:a2:68:9b:6f:34:e7:28:9b:39:9d:d2:
02:74:ad:57:63:88:64:27:f3:e0:8c:c8:52:c9:37:
16:ce:6c:57:4c:54:bf:ee:e1:62:57:7a:8d:36:a0:
af:f3:4f:0c:b7:83:f4:0c:1b:68:e5:a1:ff:c4:81:
8d:04:49:0b:5e:78:71:92:2f:39:81:c2:83:17:18:
08:16:91:11:51:96:e7:43:30:83:63:e4:62:ee:ea:
b7:19:fc:41:e3:8e:89:ae:0d:83:e1:f9:be:db:76:
dc:b8:d5:3e:44:0c:bf:69:9a:71:12:51:ca:a6:b8:
d2:be:ad:e6:2e:bf:65:a0:7a:3f:c7:b2:ae:c0:ec:
29:cb:f2:42:4d:7e:55:3c:26:fd:92:3c:10:41:f6:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:2B:95:09:C7:6D:AA:D5:46:DD:7C:6F:83:72:C8:7A:7A:20:3B
X509v3 Authority Key Identifier:
keyid:DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:19:c0:77:e3:78:6b:1c:c5:00:cb:58:38:a4:b0:a1:cb:f4:
ca:6b:8b:3b:77:9b:8f:0c:1d:aa:f3:7b:4e:ef:0c:f4:a3:5e:
4b:ae:39:6c:52:61:ec:3c:9c:60:27:63:db:72:e5:3b:c2:88:
bf:b6:14:b1:02:80:7c:f5:42:d1:e4:ba:e0:61:dc:73:17:e9:
25:ba:61:fd:74:74:fc:48:63:0b:38:95:05:00:34:6d:cb:65:
31:ca:19:8f:b2:05:26:00:1f:f6:8d:66:75:f5:e1:3c:1d:5f:
79:29:a3:fb:6e:8b:5e:d7:ea:8b:1a:f9:12:08:71:bf:12:88:
aa:b5:84:ea:3a:cc:07:0b:a8:6b:09:33:91:03:bf:91:02:08:
45:9e:3d:15:9e:64:01:0f:55:d5:a5:6d:3d:f2:e6:72:ac:25:
49:b1:70:eb:b2:d2:f9:f7:21:9f:17:f8:62:39:01:f7:75:aa:
62:7a:11:2b:e4:0b:fe:a6:67:ab:97:fc:7b:45:20:40:3f:be:
92:a1:8f:f1:1d:64:e8:d8:7f:70:8c:51:bb:cd:2a:33:83:8c:
a9:52:3a:02:73:88:39:1b:a8:b2:d2:a9:c5:0f:74:eb:56:17:
92:43:5b:4e:76:af:b1:7a:96:00:aa:98:f1:84:1a:60:ef:14:
c8:22:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:18 2026 by rpki-client