Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: ZeINIdUJeCLReTrqaljztX6IdiPs5xgLNTwbw9ZEF4A=
Subject key identifier: 64:BF:C0:34:B1:DD:05:55:6B:95:5F:8F:32:7D:7B:0E:57:1D:E4:3B
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019E1F117E94B883100DA04B3ECA4EC258A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 12BB
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: WZYmKp4zY5P082SZu6aeNv72c/5ybUeEZY3kDtyDKio=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7e:94:b8:83:10:0d:a0:4b:3e:ca:4e:c2:58:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=64bfc034b1dd05556b955f8f327d7b0e571de43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:88:ee:5f:9e:81:bf:0a:ad:db:06:c2:04:
37:2f:83:ad:80:46:66:2d:50:8c:01:04:bb:e1:6c:
30:2a:02:14:f6:51:30:18:d5:26:14:94:dd:6a:23:
e5:6e:32:77:f9:ed:fd:2c:e8:45:53:db:64:5a:14:
a4:75:14:ca:5b:f4:63:3e:04:fa:a3:f1:22:16:49:
c5:a1:b6:48:da:17:b2:18:73:d4:4c:ba:93:25:83:
28:2c:93:c9:8f:14:d5:f9:6a:02:e0:a0:bf:32:32:
65:94:66:57:c0:3a:30:c5:41:57:b1:51:cd:f5:f5:
c9:7b:89:be:1d:f4:6a:47:c3:22:b9:7d:14:ea:c5:
34:56:c2:ee:a0:b7:a5:67:83:a4:49:9e:83:4f:d0:
96:55:d1:84:00:5c:0c:e6:d7:7b:49:86:0e:35:0a:
5f:21:92:75:e9:2c:e2:7f:54:f8:0d:57:4e:11:04:
c9:5b:d6:a2:19:4e:af:1a:0e:fd:d7:27:bf:5c:11:
61:79:83:c0:35:59:f6:d5:17:64:0f:c2:be:41:d0:
b9:08:68:6a:47:9a:a0:ef:cd:38:43:45:a1:b4:ec:
0c:cc:a6:7a:71:b4:9e:c9:67:05:c4:07:86:54:58:
58:fd:4b:0a:1e:a1:98:85:82:66:22:30:7f:11:60:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BF:C0:34:B1:DD:05:55:6B:95:5F:8F:32:7D:7B:0E:57:1D:E4:3B
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:8b:59:3d:0f:5b:0c:c3:5a:af:d2:2e:b3:f0:63:7a:e3:
54:ba:25:6c:03:00:45:31:c2:d4:c5:49:8b:fa:d6:af:0c:1b:
78:46:f5:3b:2d:44:cd:e9:5f:de:77:24:60:ed:7d:89:70:18:
02:1e:7d:7f:8a:1b:c4:d6:27:6d:48:e1:5d:34:75:35:b7:06:
5d:54:43:3b:3d:9c:f8:a5:ca:2b:d7:ca:51:e0:6b:15:14:3c:
2f:0f:ac:a9:c5:95:ef:49:b5:18:bb:c7:8a:fb:1d:18:0f:21:
60:42:7b:6d:db:61:27:6b:19:82:3a:54:d7:e3:b9:46:03:7c:
a1:19:84:b1:48:1c:b1:92:7c:6d:2e:6b:cc:9e:b1:0e:35:cc:
e6:28:cb:ab:63:75:a3:e1:6f:4a:7f:e0:94:b2:78:13:e8:c7:
71:c1:27:4e:7d:2b:92:fb:45:ec:2f:57:e7:86:1f:0e:c4:59:
97:20:58:be:a4:77:9a:71:0e:26:c7:bb:ca:28:1e:46:3e:a1:
ce:65:1f:e0:9e:30:1c:a3:fe:db:79:bd:76:27:3f:dc:7f:71:
29:96:34:b1:98:68:cd:44:4b:d8:78:4d:75:be:62:e8:83:53:
40:32:3b:c2:0f:63:fb:73:69:75:95:e4:91:a4:e1:7a:a5:4d:
fc:c3:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:10 2026 by rpki-client