Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: dC65Dhq3lNo0m6Se7B9erO1OPb11fmucerTJYqam98Q=
Subject key identifier: 4E:36:5A:16:E4:E4:C6:14:FF:EB:29:87:7F:3E:DF:AE:96:49:0B:37
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019E1D59803A9F2FA6D55EAA9E6D90556CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 124A
Signing time: Tue 12 May 2026 18:01:05 +0000
Manifest this update: Tue 12 May 2026 18:01:05 +0000
Manifest next update: Wed 13 May 2026 18:01:05 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: iyXKJUs3IG0n7hK5T3xkz1azd0IYg9Edw2M1/IYesAY=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:80:3a:9f:2f:a6:d5:5e:aa:9e:6d:90:55:6c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: May 12 18:01:05 2026 GMT
Not After : May 13 18:01:05 2026 GMT
Subject: CN=4e365a16e4e4c614ffeb29877f3edfae96490b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:e6:b4:82:ca:92:f8:fc:06:b0:6c:5d:13:
8b:b6:3d:9a:1b:69:02:ce:6b:a7:41:92:5a:b0:8e:
72:90:5e:04:f6:f7:0b:b0:f1:d3:c0:1e:15:09:f3:
26:7f:8f:c7:07:19:98:20:cb:a9:6a:70:35:31:a3:
14:3b:ad:e3:17:58:5f:64:c6:27:14:39:0d:53:f0:
70:02:65:cf:09:88:93:03:38:60:88:e8:70:57:e1:
61:28:75:36:02:83:03:d7:73:5a:bb:7c:40:ff:b6:
e6:43:08:ae:3e:cd:2c:e6:c2:d8:5c:89:22:b8:5b:
5e:4a:91:95:36:d9:38:5f:f9:bc:e3:86:f0:1b:60:
72:15:48:d7:c6:6a:8a:a5:1e:95:ae:fe:0f:f4:1c:
4f:67:c5:58:76:7c:e0:58:a2:89:b4:2e:90:d8:17:
fb:d7:6a:0e:87:52:2a:b5:71:52:5a:22:6a:91:6a:
d2:68:ff:00:c0:db:93:71:11:ff:a2:6f:6e:62:9b:
cb:24:13:67:0c:07:32:e3:d7:5e:1e:b7:45:c7:de:
0c:c5:38:15:32:eb:61:6c:52:08:50:bb:98:37:da:
6c:c9:30:2c:2b:34:35:7f:22:a4:6f:a4:ec:fb:e3:
5f:3f:af:6d:ce:8c:87:94:6e:df:a1:0f:02:23:09:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:5A:16:E4:E4:C6:14:FF:EB:29:87:7F:3E:DF:AE:96:49:0B:37
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:0e:bf:98:62:a8:13:12:d8:3b:3e:fe:da:3f:89:e0:74:
77:b2:e4:e9:57:20:3a:d0:a5:d2:d4:d1:79:53:46:e2:02:f3:
78:e8:ed:1d:e7:23:a5:3c:b2:f7:5a:65:bd:d7:19:4f:2c:98:
f7:64:f8:ce:38:00:3c:c9:5d:3f:76:00:c3:e9:67:e8:10:59:
28:2c:5b:b5:e4:5c:f5:07:ea:47:0d:eb:1f:49:eb:7d:d3:77:
e6:dd:cd:1c:14:bf:1d:53:c8:78:20:f2:92:dd:77:b6:db:41:
bb:68:f0:47:26:46:d9:f7:79:15:1c:0c:8c:b1:6f:b2:9a:f6:
d6:46:5f:11:ee:93:da:f5:2f:27:8b:59:37:92:63:d4:53:69:
90:a8:20:6c:fa:9f:91:ce:dc:f8:4a:cc:90:c6:73:ac:ae:26:
38:e0:42:3d:fa:ce:f7:05:a7:93:e5:83:90:b3:91:f4:d7:d0:
5d:13:4b:09:1e:03:d1:90:2b:85:08:5f:ab:d3:77:8a:47:d1:
75:a1:f1:e1:51:fd:14:0d:db:fe:33:48:31:ec:98:8b:07:64:
6e:36:59:5c:44:58:8d:04:54:fc:2e:21:6b:ab:17:7d:d3:01:
f8:bb:17:9e:c7:fe:7e:f4:2a:1c:3c:14:3b:43:ff:ca:17:e2:
cb:b2:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:27 2026 by rpki-client