Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: ooQ4NrBZqKkK2UfxbmZzLFg8PbUqTYXkAHHXwRfzzk0=
Subject key identifier: F0:BF:E5:8D:0F:0F:72:C6:05:8A:82:16:1B:A2:E5:02:05:F0:C9:EB
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 019E1E35B3CAD9E335E3FD6814219AE8719E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: fd2EoLxUT3pcz8CBMlb+KIha2rfISurMLWhbOW94+Kk=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b3:ca:d9:e3:35:e3:fd:68:14:21:9a:e8:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=f0bfe58d0f0f72c6058a82161ba2e50205f0c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:04:46:41:db:1c:b6:07:d2:5b:0f:a8:b2:
0a:d4:9b:ec:49:8e:6d:29:5c:2d:bf:47:12:c5:1d:
32:27:4e:91:65:22:9a:f6:88:b2:67:fd:8f:ef:69:
e4:cf:89:59:2d:91:4d:e5:88:57:02:e7:da:59:55:
fe:a2:ab:50:82:37:32:be:98:a7:82:ee:f7:49:cc:
6b:5f:24:de:52:96:44:0d:0d:d7:1f:a7:01:bf:05:
8d:71:fa:ee:cf:9a:49:9e:86:5f:d2:a5:a7:34:2e:
ac:1c:c5:65:8d:e4:69:9a:bb:e3:f3:a5:42:ff:5e:
95:fd:ae:0d:8e:92:d3:a5:fa:67:bc:c0:91:fc:d2:
10:d8:ad:22:6a:b6:2a:67:30:36:e7:66:58:1c:99:
34:8a:c7:ee:af:d3:fb:41:73:57:f6:7f:3e:e1:39:
4c:8b:d3:b2:3d:60:37:f7:74:ba:c1:19:32:56:a6:
c3:8c:ee:48:0a:04:dc:6f:eb:f1:09:16:23:3e:60:
ff:2e:4c:93:9e:52:07:c3:4a:4f:4b:1d:2d:57:0a:
1e:62:6f:ba:28:6f:97:80:e9:5c:58:b9:b7:a3:d4:
60:3e:54:62:25:4f:2f:2b:7a:f6:3d:76:05:94:b6:
e1:74:be:4a:4b:63:ff:1c:dc:b7:ac:2d:4f:c9:c6:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:E5:8D:0F:0F:72:C6:05:8A:82:16:1B:A2:E5:02:05:F0:C9:EB
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:30:30:4d:84:b1:fd:e9:7f:f1:22:60:91:5d:93:35:68:
8e:b5:cc:8c:67:58:4b:83:1d:48:2b:22:94:45:91:25:f9:bd:
1d:43:a9:ba:19:87:03:69:4c:0c:dd:1c:e2:1e:13:96:8d:50:
16:e4:85:fd:6b:51:79:3a:8e:40:24:0c:63:34:0e:fc:4f:b6:
57:3b:e9:a1:bd:5c:fa:e9:f6:f2:6a:87:87:62:94:dc:3a:e3:
68:b5:2b:d3:56:a8:12:2b:ec:eb:5e:d8:53:72:75:ea:0a:d6:
5a:e6:4e:17:e9:c3:4c:21:ef:d2:c3:7e:5c:96:28:4c:59:5b:
b7:86:5e:c6:5c:81:a7:c9:0b:f4:71:9a:7f:ed:fe:7c:63:75:
b7:7d:18:e9:23:c5:93:f4:9f:59:c0:aa:ad:57:10:37:d1:58:
26:4e:71:ca:58:45:50:b9:9e:d6:ba:57:3d:fe:dd:33:1f:30:
26:46:74:b0:a7:c4:0f:07:bd:48:68:0f:73:37:5f:41:a8:84:
18:31:d0:15:1f:72:09:44:ef:df:0c:02:a6:55:c5:51:fd:f6:
d8:8f:a0:91:7a:49:bd:ca:1f:47:76:89:45:a9:ed:60:61:0d:
9e:c8:01:78:19:c8:6b:18:e9:49:51:91:64:30:64:1f:9b:e5:
0c:03:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:53 2026 by rpki-client