Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier: TF3amVd16vPnLbIPFBckuQ8mQVSapPNh7KtoON6hvdc=
Subject key identifier: 9B:70:07:1A:D8:80:B2:CE:66:51:C6:95:FB:0E:4F:C0:DA:CA:75:4B
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer: /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial: 019E1C0F921778541E28C5932D8DDEDE56D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number: 27
Signing time: Tue 12 May 2026 12:00:42 +0000
Manifest this update: Tue 12 May 2026 12:00:42 +0000
Manifest next update: Wed 13 May 2026 12:00:42 +0000
Files and hashes: 1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: qNRCInQYMlY1vRceS2S2W5P+ODMOeRthk7NNTCeQ/FE=)
2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:92:17:78:54:1e:28:c5:93:2d:8d:de:de:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Validity
Not Before: May 12 12:00:42 2026 GMT
Not After : May 13 12:00:42 2026 GMT
Subject: CN=9b70071ad880b2ce6651c695fb0e4fc0daca754b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:2f:be:ba:ae:ec:dd:02:c2:27:0a:93:36:
17:b2:88:ed:cd:c7:90:2e:83:fb:65:ff:fc:07:05:
10:74:80:e2:0f:37:53:47:99:5e:54:08:ab:28:de:
a1:a0:b4:40:83:40:5a:62:4e:4d:86:33:e5:a9:db:
ca:1a:bc:72:91:c5:42:08:d3:34:2e:d7:b9:ec:2d:
b5:f4:cf:d5:18:34:fc:f6:0f:b8:45:4c:94:0d:ea:
dd:eb:37:9f:f3:06:ae:ff:5d:7f:0d:c9:59:3d:cc:
c1:19:3c:d9:84:59:f9:5a:30:1c:b3:a5:19:de:25:
35:a4:f9:fb:d1:f5:0a:95:2b:e6:cb:db:b4:8c:2f:
f5:55:24:71:1b:97:bb:15:a2:21:13:91:5b:34:e7:
db:9c:ab:25:81:e9:a8:48:a6:ab:58:17:d3:23:13:
ce:2b:95:e5:67:ca:5a:8f:fd:16:d3:85:c7:90:c1:
f8:bc:f1:5e:95:dd:9f:9c:e0:94:a9:30:d3:71:a8:
c8:ee:e1:b5:77:51:b6:82:66:13:08:f7:99:07:84:
dc:cd:34:ae:ae:35:5c:65:35:1c:a6:be:ce:6b:17:
b1:f4:4d:65:19:49:ac:66:43:ea:0b:f0:da:0a:21:
7b:67:ec:e1:06:d8:49:ab:b7:c1:e5:54:35:ff:23:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:07:1A:D8:80:B2:CE:66:51:C6:95:FB:0E:4F:C0:DA:CA:75:4B
X509v3 Authority Key Identifier:
keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b4:cc:ab:89:37:27:56:5b:8e:7e:ff:8d:e9:8c:30:0b:29:
73:30:f2:78:fc:89:f0:20:87:a6:73:af:16:34:b1:33:2e:79:
73:ea:1a:ee:93:40:1f:50:8e:9e:a3:d9:cc:2d:31:68:bb:e4:
aa:6e:a2:28:6e:e7:6c:44:41:3a:da:45:2c:ca:48:f2:86:eb:
87:70:6c:50:3d:1a:a2:4f:0a:75:4a:e4:d2:a0:ef:e4:39:6d:
39:f4:c0:f2:8e:c2:38:89:ca:02:01:53:44:5e:49:c8:83:44:
ba:ef:09:d8:19:eb:a7:c9:30:c6:44:b9:fd:e3:e6:03:f6:5d:
aa:a0:5d:ac:70:d6:e8:6d:ee:d3:f1:20:c1:71:38:e0:4d:e8:
95:66:e4:9f:5f:f0:d9:a2:59:e6:dc:f6:3e:3e:0c:c3:c0:4c:
55:c8:be:4f:b6:40:7f:19:fc:ef:a0:4c:16:49:94:a9:54:41:
c4:a1:16:6a:7e:d5:fe:4f:66:fe:f6:87:e3:95:2e:7b:88:84:
a0:10:f6:4d:22:99:5e:a8:38:72:5f:11:5e:98:df:2d:1b:27:
51:08:21:ae:ab:ba:fc:fb:8e:81:24:f9:70:49:4e:db:fb:de:
55:dd:87:b2:d8:32:54:d5:fd:61:07:17:d1:db:4c:45:88:4c:
18:5e:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:10 2026 by rpki-client