Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: TE9G26yYgFuJR5jVZzsOqS+n4m0R9H/aSkyZPF/BS94=
Subject key identifier: 58:A0:F1:F9:E9:0D:9C:D9:34:A9:43:95:20:3D:9A:B2:64:F6:AD:C9
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019E1E35E5E2785AFB35DD91178D20EF57D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 22:01:49 +0000
Manifest this update: Tue 12 May 2026 22:01:49 +0000
Manifest next update: Wed 13 May 2026 22:01:49 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 9bya/a7RAnPzqm+iT0S2O9thL/iteGTbyB/gm1tG8Wk=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:e5:e2:78:5a:fb:35:dd:91:17:8d:20:ef:57:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: May 12 22:01:49 2026 GMT
Not After : May 13 22:01:49 2026 GMT
Subject: CN=58a0f1f9e90d9cd934a94395203d9ab264f6adc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:7c:90:6c:6e:68:e8:fa:7b:2b:52:61:57:
65:cf:35:79:99:9e:a6:70:b2:d5:5c:34:d3:2c:5e:
3b:6c:48:b8:97:10:c3:10:5a:1e:e6:ab:c0:b8:cb:
d2:82:9d:d6:0b:8a:78:b4:95:9b:24:77:bb:00:c2:
3f:3b:60:0f:7f:ea:72:7e:9a:0c:2a:64:63:39:1a:
1c:64:2a:3c:78:3b:fe:48:b0:59:e2:5c:72:bc:03:
83:ce:3a:34:01:ba:bd:c5:f6:49:9b:06:ac:bc:7c:
eb:89:cc:70:04:13:3a:3a:c4:87:ba:d3:82:5c:b0:
12:73:6c:db:0e:4b:af:dc:1c:5f:38:b5:96:ef:e5:
7e:e3:fd:a2:9f:32:db:2e:ee:34:bf:26:89:46:90:
5b:17:91:b2:47:7c:7b:8e:47:5d:a8:88:de:f3:79:
58:c5:6c:fe:dc:ed:01:b7:6e:41:21:21:9b:11:ba:
55:64:8b:4d:41:59:0c:65:c8:89:23:3d:ec:fb:9f:
f9:60:41:95:0b:df:d7:3f:ed:ea:92:09:05:48:f9:
1e:4f:21:30:bf:04:dc:21:a5:67:34:ca:a7:8d:b0:
29:98:1f:5e:fd:06:95:c8:ae:75:fb:50:5e:a1:aa:
10:d6:3b:c3:85:04:6b:2b:27:2b:db:23:2d:65:10:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:F1:F9:E9:0D:9C:D9:34:A9:43:95:20:3D:9A:B2:64:F6:AD:C9
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:98:a2:83:de:d3:cc:70:fe:a7:69:c8:4c:a8:1b:d3:0c:0c:
0e:33:20:b5:52:ae:72:64:47:9d:fc:6d:3a:06:94:e2:f9:10:
46:91:ec:c9:55:9f:7b:4d:9d:6b:c6:da:eb:a2:e3:66:d4:b0:
6a:bf:7f:aa:fa:b5:b7:0f:02:82:b0:76:27:14:f4:71:55:ec:
78:80:04:da:d4:6c:16:54:18:f8:be:89:8d:8d:71:a0:dd:76:
55:5f:c3:fd:0f:6a:d9:e4:91:73:05:51:6c:a0:39:54:d4:91:
36:9e:4f:bf:bb:91:da:de:74:ab:65:c3:22:cb:e7:66:28:ad:
1f:74:c1:37:88:05:83:ef:8a:35:32:54:a0:15:97:32:25:38:
9f:9a:53:62:22:7d:be:92:b3:5b:c6:db:50:1b:45:07:c4:63:
26:ef:f1:ff:91:78:32:7c:4f:34:fb:9d:4e:1b:d4:0f:f8:cc:
3a:5b:9b:76:ea:68:c9:1a:6d:78:2c:a8:f0:ef:05:f5:73:5c:
38:fe:50:ed:1b:3d:7f:6d:be:02:4e:2d:48:ec:84:6b:25:da:
f9:aa:d6:6c:9b:38:f8:d4:a4:32:ae:3d:89:dd:9d:eb:a2:de:
e6:c5:80:3f:b1:e1:cc:59:f6:d4:69:08:92:d8:3f:2f:37:0c:
77:2a:40:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNeXieFr7Nd2RF40g71fQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjYwNTEyMjIwMTQ5WhcNMjYwNTEzMjIwMTQ5WjAzMTEwLwYDVQQD
Eyg1OGEwZjFmOWU5MGQ5Y2Q5MzRhOTQzOTUyMDNkOWFiMjY0ZjZhZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z58kGxuaOj6eytSYVdlzzV5mZ6m
cLLVXDTTLF47bEi4lxDDEFoe5qvAuMvSgp3WC4p4tJWbJHe7AMI/O2APf+pyfpoM
KmRjORocZCo8eDv+SLBZ4lxyvAODzjo0Abq9xfZJmwasvHzricxwBBM6OsSHutOC
XLASc2zbDkuv3BxfOLWW7+V+4/2inzLbLu40vyaJRpBbF5GyR3x7jkddqIje83lY
xWz+3O0Bt25BISGbEbpVZItNQVkMZciJIz3s+5/5YEGVC9/XP+3qkgkFSPkeTyEw
vwTcIaVnNMqnjbApmB9e/QaVyK51+1BeoaoQ1jvDhQRrKycr2yMtZRBCVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFig8fnpDZzZNKlDlSA9mrJk9q3JMB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpiig97T
zHD+p2nITKgb0wwMDjMgtVKucmRHnfxtOgaU4vkQRpHsyVWfe02da8ba66LjZtSw
ar9/qvq1tw8CgrB2JxT0cVXseIAE2tRsFlQY+L6JjY1xoN12VV/D/Q9q2eSRcwVR
bKA5VNSRNp5Pv7uR2t50q2XDIsvnZiitH3TBN4gFg++KNTJUoBWXMiU4n5pTYiJ9
vpKzW8bbUBtFB8RjJu/x/5F4MnxPNPudThvUD/jMOlubdupoyRpteCyo8O8F9XNc
OP5Q7Rs9f22+Ak4tSOyEayXa+arWbJs4+NSkMq49id2d66Le5sWAP7HhzFn21GkI
ktg/LzcMdypAEw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:51 2026 by rpki-client