Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: YD6TNjWxVicZzLj+clrhfBFCyrS/W0SBLGSTAa7J8pc=
Subject key identifier: 2D:16:8E:47:7B:4C:0E:C8:15:39:22:E9:59:C0:9F:F2:CE:7A:C3:0B
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 019E1E35B9381E4D3EAAB50B645BFBDC78B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 0FEB
Signing time: Tue 12 May 2026 22:01:37 +0000
Manifest this update: Tue 12 May 2026 22:01:37 +0000
Manifest next update: Wed 13 May 2026 22:01:37 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 1btI5Lyi/9WXJn4aLOvrafDjLsaha2PtsWATIlsSyuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b9:38:1e:4d:3e:aa:b5:0b:64:5b:fb:dc:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: May 12 22:01:37 2026 GMT
Not After : May 13 22:01:37 2026 GMT
Subject: CN=2d168e477b4c0ec8153922e959c09ff2ce7ac30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:26:5e:65:74:89:51:49:a4:36:45:b7:37:
d0:29:a6:7b:b1:96:c3:ca:16:f9:01:88:1e:12:e4:
fe:2b:8b:46:5b:af:90:4b:5c:d7:0c:96:b9:cc:c1:
e7:a7:9f:f9:47:b5:11:3a:42:37:ec:74:e2:63:82:
b9:8e:16:3e:33:26:08:37:37:c4:4e:30:25:60:ac:
ab:fa:7b:ce:09:07:80:5c:af:a6:3c:4d:0e:13:0d:
b3:02:2a:81:cc:c5:94:8a:57:c1:e8:8d:1e:22:75:
f6:e7:ce:2d:e8:d3:9c:cb:a7:3e:2b:aa:f0:ac:3c:
a4:d3:f6:7f:8b:5e:5d:db:fd:cc:da:b8:f3:33:71:
ec:23:99:f4:be:8c:13:ad:27:0d:c1:48:ea:13:c5:
e6:d4:7a:63:b7:af:90:7f:b3:10:b6:f5:69:3d:60:
b8:a0:78:2c:ad:c2:0a:fe:37:30:b2:f7:31:f5:d0:
9d:57:ed:2b:0d:4b:8a:ea:e4:7e:1e:76:d0:f6:3c:
0b:ea:99:f4:60:04:1d:95:e6:9e:c8:a2:6d:e3:81:
28:b7:f8:fa:81:48:f5:5e:5b:7e:e5:4e:82:70:cc:
65:24:cf:5e:88:93:4e:6b:10:07:93:70:3a:6f:27:
77:eb:57:c0:3d:35:55:3e:85:8b:92:ca:0e:0c:b7:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:8E:47:7B:4C:0E:C8:15:39:22:E9:59:C0:9F:F2:CE:7A:C3:0B
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8a:9c:98:0a:58:f9:76:0d:48:96:f0:5f:69:66:95:05:0a:
c1:91:58:d9:bb:31:2b:41:b0:71:53:77:c4:7a:bb:41:58:28:
ad:0c:7e:51:bb:c9:2c:36:91:14:2d:6a:40:da:98:45:85:66:
a6:f2:66:db:06:6b:8b:ce:ce:14:b1:a3:17:96:ed:bf:45:79:
52:94:da:e8:8c:6b:65:b2:ee:d3:15:fc:51:6c:5e:ce:93:04:
73:75:c5:3a:5f:d0:c4:9e:b8:5b:d9:df:61:60:ea:df:91:e5:
2d:3f:bd:7e:65:be:e2:de:dd:d9:33:08:a6:1b:38:27:23:f5:
5b:f6:47:c1:62:1e:21:f5:00:52:be:4d:41:58:d8:c9:6f:1d:
42:2b:d4:72:27:b1:01:5c:b7:bd:80:71:54:a4:ab:fe:b2:b8:
29:a6:4d:c1:cb:36:50:79:67:6a:08:92:8e:5c:ff:26:48:e3:
af:61:dc:49:e4:cc:16:39:4f:86:b0:0a:7f:f2:49:f7:9f:c3:
bc:c6:7b:e6:a6:5a:1e:ba:af:43:40:59:6c:9d:bf:b3:0b:ed:
2b:37:fa:0f:45:d2:a1:cc:17:46:3f:0d:b7:ef:5f:4e:77:8d:
52:9d:ff:83:b8:24:c7:79:f8:90:d9:4b:f8:de:26:16:22:6f:
9f:df:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:13 2026 by rpki-client