Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: ndunezjhnj3MMjFsmvVqTF5bbJ7jsLi6YEO9QThK40U=
Subject key identifier: 6B:FB:60:FD:D1:4C:40:27:F6:59:78:3C:B9:D6:A7:E5:6C:8B:37:6F
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 019E1E3586450700C34331417974BF38801C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: 0179
Signing time: Tue 12 May 2026 22:01:24 +0000
Manifest this update: Tue 12 May 2026 22:01:24 +0000
Manifest next update: Wed 13 May 2026 22:01:24 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: 6QHAwPVXvbNDOFNQCXc+xCW0Q3nRIyTSt9761diY6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:86:45:07:00:c3:43:31:41:79:74:bf:38:80:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: May 12 22:01:24 2026 GMT
Not After : May 13 22:01:24 2026 GMT
Subject: CN=6bfb60fdd14c4027f659783cb9d6a7e56c8b376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:eb:20:e7:ae:a2:d5:b8:13:75:6b:20:7b:
67:69:d2:ba:2a:7b:20:64:3a:c8:7c:02:b3:a8:4e:
2d:1b:90:ee:95:71:02:fb:9e:07:45:b5:80:e1:52:
f4:74:c6:f0:a3:ea:50:05:2c:47:ff:ce:a1:43:65:
3d:1a:99:2b:c7:7c:04:67:30:68:6b:6b:63:08:49:
28:11:b4:a3:d3:95:2d:0e:f5:6b:61:0f:c9:7d:5e:
66:27:34:a7:d1:5a:cc:0d:94:ae:9d:3f:9b:61:92:
20:a2:49:39:24:fb:b0:d2:1b:f9:05:9b:70:ea:50:
17:9f:23:e0:c0:c7:18:bd:00:19:0e:b0:1b:0a:14:
46:9e:94:e5:93:a0:f2:31:cb:c4:31:f7:92:db:f3:
b5:1d:be:23:cd:0a:5a:6f:2b:bb:1e:b8:38:64:ee:
b3:25:bd:8b:80:78:66:52:bd:85:76:a0:fc:65:bb:
40:16:b6:2c:d1:a6:69:74:1b:34:2f:f7:46:81:bc:
58:58:2e:97:3a:f7:0f:9b:e1:69:4c:ea:2b:2c:49:
d2:d6:9c:8c:ff:f2:3e:f8:f4:d6:8c:9f:cb:e2:00:
63:d6:f7:53:fd:74:f6:56:70:2f:f9:ab:74:78:b0:
4d:47:d8:c9:84:d6:6f:3a:5e:a7:ad:ef:35:5c:1c:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:60:FD:D1:4C:40:27:F6:59:78:3C:B9:D6:A7:E5:6C:8B:37:6F
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:ab:a0:bc:c4:80:35:3c:13:5f:77:d5:dc:db:d3:bd:99:
da:8d:95:29:e0:d8:ef:47:b8:f7:b9:9b:d4:36:b1:c4:69:09:
96:79:48:db:2b:2d:01:d5:38:b6:cf:cd:d1:58:b6:2a:77:61:
80:88:cc:9a:ca:a2:cb:cc:9f:11:70:8d:d7:8a:be:88:c1:0e:
73:bb:f2:76:fa:e9:46:f4:a6:a7:e4:e3:79:f7:4a:47:ad:e9:
70:e5:2f:ba:a0:1b:ab:bb:51:89:b5:af:dc:44:8f:58:77:26:
bc:e9:e6:ac:74:e1:53:a2:38:51:f7:86:fb:c4:0d:3d:dd:54:
26:0a:11:76:34:72:da:81:a2:5e:ac:6c:dc:bb:51:86:10:85:
30:fb:9c:69:29:8d:02:03:52:c1:a2:36:d1:4b:5b:92:03:e9:
c5:e4:2f:75:e9:f0:c9:ba:47:b1:fe:05:65:39:58:5b:6e:5f:
01:69:0e:bd:f4:43:8b:58:d1:37:51:f8:1f:ad:52:80:02:78:
8b:b6:f6:68:ea:e0:aa:9e:bc:fb:5c:86:c8:b9:00:87:33:f6:
3a:89:5b:01:46:6e:f5:84:fa:ed:c6:c5:36:ce:01:1e:dc:75:
7e:31:c6:1c:c2:8a:2f:2d:30:66:27:d6:f7:53:3c:75:c4:ba:
4c:d9:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:26 2026 by rpki-client