Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: nrJZjg2cZKJki0rD6ltCuYp41fFwB6zfMYpkj/1j+Oc=
Subject key identifier: 1B:CC:78:72:7F:61:FD:EB:0E:21:4D:B4:41:C5:FA:0A:D7:2E:2A:70
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019E1CEBDA2B2233B76539D16B6FAC54C5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 15DC
Signing time: Tue 12 May 2026 16:01:19 +0000
Manifest this update: Tue 12 May 2026 16:01:19 +0000
Manifest next update: Wed 13 May 2026 16:01:19 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: nk9NwJ2wq+5RN+57FEgaos7A8MX0tau1ma0v8khatCM=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:da:2b:22:33:b7:65:39:d1:6b:6f:ac:54:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: May 12 16:01:19 2026 GMT
Not After : May 13 16:01:19 2026 GMT
Subject: CN=1bcc78727f61fdeb0e214db441c5fa0ad72e2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:be:c3:49:09:a3:b4:d0:2d:10:51:a3:6f:
ca:8c:dc:13:31:3e:fb:20:0e:a5:3f:b3:4b:61:c1:
af:15:57:4f:98:26:11:23:03:62:75:b4:5e:90:fc:
20:0e:d2:17:95:0f:a3:d5:48:93:11:96:a0:3f:f9:
68:3c:a7:c8:95:d4:f4:2e:e6:e8:20:52:bc:58:fd:
9d:ca:9b:ab:47:25:c5:82:73:47:75:82:40:b0:dc:
80:ff:ec:a4:b9:66:98:dc:2e:4f:f9:2a:6a:2d:a0:
68:2a:a6:2b:0c:88:49:43:5a:48:2f:84:d4:7c:3d:
41:af:dd:fe:4f:13:88:16:b0:c2:a0:c1:ea:92:84:
1b:1c:c1:1f:b5:30:70:62:cc:c1:06:b9:37:0b:2a:
68:3e:49:f8:19:0b:f4:25:e7:5d:89:a5:7e:53:8c:
f7:d6:f9:38:af:ab:62:1c:ad:ee:c3:41:ba:a3:9b:
d2:c6:f7:a8:d6:20:e0:32:5b:20:ed:86:5f:20:25:
49:e2:50:53:9f:ce:2e:59:b8:74:52:d1:93:58:81:
b9:6e:bd:57:4a:73:45:db:a1:8b:0c:66:78:ea:a6:
f1:aa:99:a8:da:d5:c6:20:19:d9:66:62:55:3b:2a:
7b:c2:29:fd:1e:7d:66:37:5c:7b:82:1c:ca:a2:36:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:78:72:7F:61:FD:EB:0E:21:4D:B4:41:C5:FA:0A:D7:2E:2A:70
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:23:80:ac:d3:4e:03:2d:b8:01:f5:c4:e8:ef:a0:d0:cc:ad:
d2:1c:66:c4:e5:63:9a:ab:2b:22:27:d6:46:b5:5e:46:9b:d2:
b4:a4:6a:e8:fb:d1:92:35:af:71:7f:31:79:6b:df:e2:e9:59:
2f:32:f9:86:22:b0:9d:d8:af:0d:29:b1:fd:8b:58:48:f4:0a:
72:57:7b:9c:0a:cc:eb:e0:fb:ee:ad:3c:14:04:7b:a6:67:4e:
36:11:43:43:56:e5:c6:20:15:ba:3a:23:b8:61:2e:10:ac:ee:
2f:c3:19:38:70:db:e9:2c:09:6c:66:66:ae:63:f1:ca:fc:81:
74:a3:f3:7c:fa:3c:d9:45:d8:c9:06:b2:c9:12:0d:63:f8:31:
31:73:8e:19:5a:47:66:bb:b4:fa:98:03:3c:59:56:d3:24:ea:
83:57:dc:0b:1a:02:15:04:4a:b0:69:5a:a1:bf:b2:cf:c3:31:
8a:00:20:35:26:f9:f6:6b:af:1f:8c:58:88:74:a9:73:a6:fa:
68:5d:25:27:c4:f2:89:ee:52:fc:af:7f:e6:13:5e:e7:43:d8:
ed:f1:32:01:f2:2c:d7:39:82:3c:fe:fd:5a:69:94:52:83:3e:
ae:b1:46:3c:9a:43:51:48:2b:26:71:05:d2:fa:b8:62:26:dd:
06:16:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:28 2026 by rpki-client