Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: XfVOmfqM+Nw/hXG8k8py+1wtjr6JR2AqqkO0B3S4PDI=
Subject key identifier: 66:37:69:F2:1A:05:15:AE:24:3D:FC:6B:B6:EE:5B:4A:CF:4A:68:5F
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019E1BD958274ACEA397509E72CC20549C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 11:01:29 +0000
Manifest this update: Tue 12 May 2026 11:01:29 +0000
Manifest next update: Wed 13 May 2026 11:01:29 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: H8ygewEeP/M3m8WXwLGtXnUj5wdDKsUjyeB9CV45igo=)
2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:58:27:4a:ce:a3:97:50:9e:72:cc:20:54:9c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: May 12 11:01:29 2026 GMT
Not After : May 13 11:01:29 2026 GMT
Subject: CN=663769f21a0515ae243dfc6bb6ee5b4acf4a685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:6a:69:99:d8:08:1b:18:76:1a:f3:b1:bf:
a0:2b:95:f9:01:ce:f7:ee:9a:37:3f:17:a0:44:bc:
71:61:54:25:49:f4:78:df:0c:28:39:5a:50:83:f2:
47:11:ca:f6:55:6a:95:f9:e4:45:fd:1a:52:2d:13:
21:bb:c1:3d:3c:3b:54:44:3f:7c:e7:cf:e8:97:ce:
1e:b4:cb:40:11:0f:2f:cd:ba:ec:79:9e:51:ee:d3:
f7:fa:8d:cb:8c:b3:32:c3:08:9b:15:65:e8:88:53:
82:91:ed:d2:02:a4:91:93:14:cf:95:8d:07:6c:ec:
e9:db:b8:d0:a6:22:84:fc:00:2d:99:8e:2f:7d:84:
07:e1:01:8b:01:cc:68:8c:c7:01:e8:74:93:46:44:
42:97:bb:d7:53:d1:7f:2e:40:2f:a7:15:46:df:51:
98:23:74:db:8d:76:e3:3e:68:fb:10:fa:73:de:1e:
16:db:bc:e1:ca:ae:b8:b4:d0:a9:7f:e5:d5:49:2f:
94:d9:95:78:95:11:f1:7e:c5:64:f1:1e:7e:54:ec:
f4:39:53:12:52:2d:11:94:e6:89:cb:00:ea:67:25:
31:56:ce:54:fc:da:46:14:74:6e:c9:ce:d4:1c:f6:
5f:53:56:ce:49:93:97:43:35:4b:6a:72:57:6b:e4:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:69:F2:1A:05:15:AE:24:3D:FC:6B:B6:EE:5B:4A:CF:4A:68:5F
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:fa:eb:34:15:09:5c:ca:38:d1:ee:c2:2c:49:bd:ad:40:
e2:da:40:fc:32:de:45:21:77:c3:1d:f5:04:07:72:c9:22:44:
43:1a:14:d5:d8:fc:d8:4c:cd:56:c6:40:4b:58:82:ac:10:42:
d4:70:6c:a0:cb:07:52:37:bb:c6:4c:96:22:da:ca:f2:9e:dd:
67:9d:76:22:16:96:29:fe:e4:b8:60:44:dc:6e:86:dd:ea:37:
21:a1:56:f6:97:6a:82:d7:3c:a8:de:40:c7:cb:35:73:67:e1:
4a:fe:b9:cd:4c:d5:67:9b:2e:4e:1a:1c:a3:4b:17:ad:b8:10:
07:7e:35:dc:2f:c6:dd:ac:ed:1f:9f:75:27:f7:8d:b5:6d:88:
49:ca:3e:d9:aa:bc:10:e2:af:44:c8:74:7a:a5:a8:8e:dc:ab:
2e:3f:c9:6a:14:aa:df:51:55:bc:ce:19:f4:0e:95:40:b2:16:
7e:80:42:77:2b:b1:42:0b:52:c0:79:9f:00:fc:cd:8e:c6:3f:
76:3e:d3:0a:8b:5b:44:0a:b4:a6:05:fd:8b:ac:6c:0d:a4:f6:
14:ef:74:1d:08:49:0f:85:78:1d:a1:ac:ef:89:56:74:6d:3b:
3b:31:00:29:12:73:75:40:cc:fb:84:b4:9b:41:0e:d2:14:8d:
24:4b:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:40 2026 by rpki-client