Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 8cAfFmdR9i2tPX1kSah3qbB9jZ3IbUHs5/dbu1n7axY=
Subject key identifier: 9B:CB:77:72:1F:63:7A:F9:CE:12:0A:08:80:5A:98:EE:90:25:9D:F1
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019E1CEB824201BCB7534C75242941CF5A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 16:00:56 +0000
Manifest this update: Tue 12 May 2026 16:00:56 +0000
Manifest next update: Wed 13 May 2026 16:00:56 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: XRWCRHvsGJq6lu1pmbvCvGEGrlGDGhkKwiCsCT29mEk=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:82:42:01:bc:b7:53:4c:75:24:29:41:cf:5a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: May 12 16:00:56 2026 GMT
Not After : May 13 16:00:56 2026 GMT
Subject: CN=9bcb77721f637af9ce120a08805a98ee90259df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:46:ba:79:b2:5e:96:17:68:ae:d0:46:10:
6b:eb:fb:89:3c:24:44:6d:e9:0f:a2:45:f2:4f:ab:
cc:40:f1:5b:6f:c0:25:f7:df:6a:d5:26:db:84:64:
82:49:6c:14:b1:76:e4:ca:b8:5a:20:7e:53:0c:59:
58:a6:c2:46:e9:84:7c:11:09:64:aa:84:1d:c8:ff:
1f:2b:cf:e1:a3:15:71:58:19:a7:96:48:16:9e:2f:
b5:85:f2:ca:44:44:ad:3d:bb:09:14:ba:ca:72:dc:
a9:0d:a3:6c:87:56:7f:a4:28:3c:9f:97:e2:38:f1:
49:c5:ac:ab:44:6f:40:36:a3:2f:3f:95:3f:3a:b0:
cc:87:4b:fc:08:e7:a2:c0:1e:2f:01:a1:77:31:b3:
32:f3:a6:1d:f1:c2:29:ce:cb:d5:78:e8:9a:d8:e5:
88:81:8e:ee:06:e8:26:89:3e:ef:ba:60:66:e8:ae:
ae:aa:aa:83:95:ed:14:c8:ea:5c:0d:94:ff:6b:7a:
19:25:39:2e:ec:41:4f:22:f2:39:db:78:eb:29:9d:
92:76:3d:7d:ba:bf:2d:ee:0f:8f:c9:07:cf:36:f6:
8f:4c:6f:2a:18:8d:6c:e4:f9:dd:e6:8a:8b:1d:ed:
24:3c:5e:1c:7c:fe:be:83:4f:39:84:76:90:0e:be:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:77:72:1F:63:7A:F9:CE:12:0A:08:80:5A:98:EE:90:25:9D:F1
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8f:31:6a:b8:ba:11:91:56:1c:2f:4f:43:2e:60:e5:b7:22:
45:94:66:8d:93:2c:81:0b:27:bb:fa:f1:13:76:e8:55:21:81:
1a:4d:35:97:d4:7b:56:6d:ab:ae:5f:73:44:d1:cd:64:84:e2:
a8:0f:85:95:4d:1e:c4:e9:1b:d6:50:3d:ae:96:44:98:54:62:
ed:a8:66:7a:cd:7e:6e:55:92:96:9a:4e:e3:51:44:0a:8f:bc:
d4:13:c8:af:92:ca:ca:7a:8b:f7:da:79:ae:72:75:04:6a:22:
49:56:b9:63:74:6b:e5:d1:56:92:79:1e:c6:14:5c:a4:d8:12:
bf:99:b1:d7:fe:06:7f:3e:5e:4b:64:5c:ee:2e:32:aa:83:7f:
7b:52:6f:21:7e:8d:27:ff:fa:fd:20:a3:c4:c7:aa:1d:f4:77:
56:7c:d1:27:db:ec:28:e7:91:14:e5:79:9e:ff:1b:5a:8d:81:
e5:54:e2:a8:2c:0a:53:3c:77:05:f9:b1:f7:f3:38:08:be:9d:
60:28:7a:0d:b3:09:56:81:64:9f:d3:ea:ad:2f:c5:f9:fd:9c:
8b:24:f2:46:89:de:53:38:49:96:a1:10:2a:76:c9:cb:9d:87:
08:f6:58:83:af:88:5e:ce:16:05:2f:f4:4f:60:ed:91:98:a3:
e4:56:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:59 2026 by rpki-client