Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: j4uLcLPuy4MtKXmFxBCmyMwdRJAERBtYjMc9KdmuUZE=
Subject key identifier: B0:E3:E7:F4:7C:80:1E:CF:18:E9:3D:47:4D:A7:73:F2:A7:B9:D4:0F
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019E1DFE880C65B973C974B532CB8AA27996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 189B
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: 5WKZFJvIwb4xxpyo7M68O5CIEkzoQ0fd5eSuvfs0mSU=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:88:0c:65:b9:73:c9:74:b5:32:cb:8a:a2:79:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=b0e3e7f47c801ecf18e93d474da773f2a7b9d40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:28:80:2a:d0:96:8a:6e:20:cf:bf:24:9d:
44:a8:a8:10:49:5d:79:d8:a6:69:3e:4d:01:44:1f:
83:28:8b:ef:b5:95:84:fd:53:b8:08:2f:a8:28:f3:
66:a8:71:b1:8b:b3:0b:22:12:2c:08:bf:e5:ec:ae:
41:c1:9d:a0:e5:b5:d6:45:97:d3:b7:26:26:00:73:
d7:1a:0c:dc:ed:0a:60:51:6c:a2:42:92:bf:8b:08:
ff:ef:cd:f6:e0:79:99:37:ce:90:c3:17:0f:f1:45:
1f:7f:63:08:9c:29:bd:cc:13:2d:6e:22:57:ce:89:
43:1d:fb:90:d0:24:2f:50:b4:73:4c:dc:43:21:ae:
b6:c9:cb:5d:0c:c4:d6:a6:be:5f:0f:c5:9f:8f:ef:
1d:47:83:01:e9:db:7a:9f:5b:2a:68:31:c9:17:26:
ab:0a:18:bb:c7:0d:77:b2:a0:c8:71:05:a9:08:b6:
58:46:f0:90:dd:c4:6f:59:d0:00:b3:15:b6:14:d3:
ae:be:1b:db:ad:7a:a2:a9:5b:6f:90:15:c1:bb:f3:
7c:5b:6d:3a:09:bf:4a:85:55:6b:38:bd:57:44:a2:
0d:2e:f3:76:04:e8:c1:1e:da:de:b6:1f:1e:44:b1:
b9:c4:6b:3d:f2:bb:e9:50:2b:c8:fb:6d:87:80:a8:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E3:E7:F4:7C:80:1E:CF:18:E9:3D:47:4D:A7:73:F2:A7:B9:D4:0F
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:80:a8:84:81:a5:65:ce:b4:21:fa:50:66:b5:ad:e8:e4:
44:4d:1c:b5:b6:1b:8f:40:31:e1:fe:d6:3e:e0:c3:c4:27:2b:
d1:dc:12:7f:09:6e:46:46:5f:b6:00:3c:17:c2:b0:96:58:7b:
55:2f:a1:cb:6b:68:db:39:2d:3f:42:a7:89:a0:d4:19:d0:6d:
a9:35:60:e3:12:36:a2:c5:a8:07:b5:73:56:b3:40:e3:13:84:
95:d8:cd:48:d1:18:36:0e:34:f3:e4:0f:69:e4:88:ce:cb:c0:
7d:8b:46:b0:a0:b1:3b:cc:27:65:ba:62:0e:11:7f:e0:a8:ef:
ec:4f:04:28:c1:2e:98:23:e4:f5:e0:b6:97:96:38:be:93:79:
73:33:df:3f:26:45:1a:c4:5c:28:d8:50:cc:81:0b:77:9d:5b:
f8:8b:c9:6c:43:94:03:98:97:6d:97:9d:a4:96:de:68:b9:e0:
ce:f4:09:c9:37:30:14:b4:cf:f7:1a:eb:4c:86:e8:4a:cf:79:
e9:d2:e2:74:e7:5d:53:98:f1:d9:cf:7b:a1:34:45:49:f5:64:
b7:a7:4f:ba:c3:db:5e:7f:b8:4a:27:eb:55:61:36:ea:94:66:
93:a6:9f:b9:87:8e:56:93:67:b5:37:08:37:6e:bc:77:47:24:
bc:f1:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:44 2026 by rpki-client