Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: gMT3IqVWzh7XO3YCexIAc1eenB5ln6WLRxyAo9wm7gU=
Subject key identifier: 3D:8F:5F:C0:20:20:CF:D0:3D:80:E5:6A:B0:9B:C8:0F:C8:90:D5:B8
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 019E1F47FE1112980F2926A2C31B12436550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 03:01:12 +0000
Manifest this update: Wed 13 May 2026 03:01:12 +0000
Manifest next update: Thu 14 May 2026 03:01:12 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: 01v+jUJv0HC/q2qqv6DH2AzdEDZU08PIIFwka4Cyo4k=)
2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:fe:11:12:98:0f:29:26:a2:c3:1b:12:43:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: May 13 03:01:12 2026 GMT
Not After : May 14 03:01:12 2026 GMT
Subject: CN=3d8f5fc02020cfd03d80e56ab09bc80fc890d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:ef:1e:a4:62:7d:9d:1f:80:2a:51:16:aa:
2b:94:06:79:39:e6:7c:00:8d:78:ce:c3:d3:35:29:
b7:4b:09:d4:95:ce:00:70:da:71:45:b3:47:0d:5f:
23:f6:e5:cc:5f:e1:69:ea:75:e4:2a:55:e7:a5:ef:
82:ca:34:ad:e2:6a:ed:2a:3b:25:e0:df:4f:be:f5:
41:5c:e4:68:a2:86:3d:0f:9c:90:2f:6e:11:3c:27:
52:da:45:80:dc:de:05:f3:fe:f7:db:4c:aa:ac:58:
b7:a5:31:42:e0:af:eb:dc:d9:2a:72:86:fc:b3:7f:
09:65:8b:b7:8e:27:0c:f1:00:81:34:a2:9d:74:ee:
06:9e:60:9d:25:78:32:7a:ff:95:f0:15:b0:94:cc:
40:ca:52:e4:1b:bb:ef:e3:2f:5c:09:36:82:36:2b:
ef:ee:61:28:fc:a9:39:67:35:cf:19:43:9d:d7:50:
6b:11:01:74:55:8b:59:2d:bb:23:20:5f:1e:03:61:
4a:81:bb:a7:b7:cd:13:24:18:01:d7:b7:f0:e5:3e:
79:c8:0b:db:12:ea:b4:db:8e:77:3f:b9:cc:2b:65:
79:fe:c8:bd:99:43:09:42:83:6e:50:53:0b:3b:d2:
c8:e2:be:5a:b8:42:62:b8:0e:2f:b8:58:61:23:d1:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:5F:C0:20:20:CF:D0:3D:80:E5:6A:B0:9B:C8:0F:C8:90:D5:B8
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5c:ab:02:e2:42:76:9e:77:c1:72:91:34:fd:f7:9a:b2:b9:
3e:fd:ff:4e:d6:97:0b:2b:dd:58:8b:5f:6c:57:51:31:35:94:
9b:d9:45:3c:07:e6:24:31:90:4e:aa:5d:64:a7:00:a4:00:ea:
09:b9:36:71:3d:4c:ce:67:24:8a:61:6d:9a:db:98:c0:54:fd:
19:99:aa:74:8d:b0:93:c4:f5:77:c9:9d:82:16:5f:be:07:c9:
14:39:25:80:1a:f4:b2:bb:55:2b:d5:ab:6b:32:22:39:81:75:
86:51:ea:e4:d2:58:f4:0b:42:ae:b5:a2:a8:f9:79:6e:39:d3:
d9:23:d3:6f:4b:ab:76:16:c4:6c:b2:48:1d:69:06:30:97:5a:
4e:15:d2:c4:35:ee:d0:99:e8:04:fb:5f:b7:14:b8:4e:dc:cd:
a1:c9:be:35:f2:01:d1:c3:3c:28:dd:42:56:a1:96:3e:bf:c0:
5b:33:c2:0e:9a:78:1c:2c:33:3b:b2:9d:05:b6:ab:cf:0f:f5:
79:64:e6:86:b8:77:d9:37:9b:2a:38:f6:3d:5b:2a:e3:1e:3a:
21:ef:a1:c1:06:45:47:1b:92:b1:9c:33:f9:ec:ba:91:e2:c9:
33:eb:f4:3e:38:1b:2b:b3:ab:9c:60:5c:04:1e:88:1a:cb:c3:
62:32:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:15 2026 by rpki-client