Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: h1MFtbNX3TOILNh1WHmdDqWT2zRNVxYpxjEq2RfU80w=
Subject key identifier: F8:1E:1D:FC:07:3E:D7:19:A5:F4:84:56:ED:49:92:DD:CD:6E:52:62
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019E1CEBC1A4D2CF1CB826E8D5F0A73FA30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0F9A
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: +LuW/O5dZ/FU1KXhepf4fpPrvRhyFtT08AjkdSfHD2o=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c1:a4:d2:cf:1c:b8:26:e8:d5:f0:a7:3f:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=f81e1dfc073ed719a5f48456ed4992ddcd6e5262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:65:82:e2:99:b4:80:8e:d9:41:1a:cd:ae:
43:5b:d6:80:0f:0d:0e:c3:75:1f:d7:86:90:1a:31:
c3:b6:a2:4a:bd:e0:bf:86:04:2c:23:72:a8:0a:ca:
0b:54:33:88:d8:4e:4a:0b:30:13:18:9d:32:d0:8f:
9d:3f:19:39:09:c5:94:38:4e:de:20:ee:1e:e1:4d:
0e:37:d6:32:68:19:4b:ea:d6:0f:78:dd:c9:ab:2b:
7a:5a:2f:49:4a:b8:12:1f:8a:63:33:a2:ed:17:11:
c8:f8:17:cd:c4:fa:f2:56:4b:eb:95:ff:ed:76:85:
aa:0c:ea:db:73:39:a8:9d:03:8c:35:01:4a:64:16:
26:9f:43:0a:e7:ce:63:4b:e3:09:67:ac:7c:f4:60:
2a:cb:1d:fe:92:7a:6c:81:8d:dd:3e:19:f2:be:6d:
17:4c:ee:58:f7:44:2d:e8:0d:46:39:be:bb:2a:2b:
a4:e0:d4:ce:9f:84:7f:96:c2:09:f4:5e:de:47:0f:
e2:ac:5b:08:b0:4f:ba:0d:52:a4:27:4d:11:c9:93:
3f:15:f4:97:ac:fb:00:fd:10:04:bf:ed:35:81:34:
00:c9:af:93:3a:07:57:bf:12:a6:dc:37:f5:47:ec:
3f:39:4a:77:74:54:0f:2b:98:24:42:8d:6a:6c:ff:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:1D:FC:07:3E:D7:19:A5:F4:84:56:ED:49:92:DD:CD:6E:52:62
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:81:53:e7:25:0f:4b:36:85:7b:6e:7a:79:f2:e5:05:a1:
63:58:64:e9:ee:10:ee:39:1d:92:13:bf:3c:9f:e8:eb:9d:6c:
84:2a:f4:43:90:bd:2f:1e:8f:97:d5:c6:f8:ce:ed:5a:2a:6b:
97:4c:ed:f3:b3:0a:4e:3f:47:87:2b:fc:6d:3c:e0:ad:a5:48:
92:15:37:40:ba:15:99:d1:80:ca:1b:6d:ec:55:24:f6:44:b9:
7b:d5:d7:9a:5d:de:01:69:b6:72:27:ce:d6:e0:ab:f1:bb:3a:
60:23:b3:88:9c:cb:5b:f6:4d:38:97:73:40:ee:e1:2b:91:c8:
d3:cb:b2:c5:65:d6:3b:00:8d:30:19:61:e5:7a:b4:65:00:73:
95:3f:32:a5:77:a1:f6:67:2e:dc:a5:e9:31:83:70:33:bc:19:
fa:db:dc:5f:45:ae:71:8f:64:71:68:fa:ba:2e:02:dd:f1:ce:
df:6c:15:ef:f4:b2:65:25:30:3d:c8:68:63:27:40:05:d8:d0:
20:3f:9e:0b:9b:b2:5f:fd:c3:35:e9:9e:24:2c:99:ba:b0:99:
9d:1a:e1:79:c6:29:92:a1:6f:c2:52:82:51:90:be:fe:80:75:
5e:a1:94:60:b8:67:0b:02:7d:a5:a3:e8:f6:c4:34:57:cd:8a:
3c:98:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:23 2026 by rpki-client