Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: aN8xmaLmVOU4gOhbdwuffaDSXaVmIb1EVTNp8A6UedY=
Subject key identifier: 13:F6:30:A3:1A:4A:DE:11:B2:62:96:47:01:62:29:33:E6:55:65:45
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019E1D22E3AD0386668FECDDE6C2D2E35854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 140D
Signing time: Tue 12 May 2026 17:01:26 +0000
Manifest this update: Tue 12 May 2026 17:01:26 +0000
Manifest next update: Wed 13 May 2026 17:01:26 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: 24Y1V9q4k/Y+1bTsN4smqDthMT1jDwIe0+q8qa6RaOE=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e3:ad:03:86:66:8f:ec:dd:e6:c2:d2:e3:58:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: May 12 17:01:26 2026 GMT
Not After : May 13 17:01:26 2026 GMT
Subject: CN=13f630a31a4ade11b262964701622933e6556545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:69:2b:fd:8b:9f:08:f4:06:17:38:10:a5:
7d:6d:dd:b5:a8:5e:8a:fa:fc:95:03:a4:d6:ea:0a:
a0:b5:83:94:7f:0f:6f:8e:68:a4:32:d1:f0:d7:78:
82:bc:74:ba:11:a3:4a:6f:f4:e7:bb:39:2d:1c:b1:
07:71:c6:b2:d3:a7:bf:69:88:59:dc:b5:3c:94:a9:
73:53:8f:8b:47:a6:ad:13:aa:7e:2d:29:e9:c7:24:
f0:32:1e:cd:e6:4e:05:df:1f:38:26:34:84:a8:cc:
d3:6d:91:7c:db:63:b0:38:97:a3:9e:3e:f4:cf:15:
4f:6c:a9:c7:79:0f:bd:a8:39:4a:08:e2:03:fc:f5:
83:84:ab:f5:31:28:92:59:6e:43:8d:f1:3f:6d:34:
42:68:f2:ff:70:85:06:b2:1b:5b:58:93:a9:6f:36:
82:36:14:1f:38:fb:2a:ee:1f:3e:9f:98:fa:a6:f9:
85:38:46:24:7e:b2:da:1c:ee:4d:87:e7:21:a4:34:
b6:40:c8:24:5c:ee:84:0d:51:21:f5:62:1d:17:7b:
de:0d:b1:bd:8c:01:91:a6:59:81:42:02:af:9f:b8:
84:42:03:24:35:70:23:69:f1:b2:9a:eb:30:0b:64:
de:40:75:ed:da:8a:4e:fe:de:2f:09:e0:f0:d4:53:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:30:A3:1A:4A:DE:11:B2:62:96:47:01:62:29:33:E6:55:65:45
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:29:c8:61:fb:35:86:eb:81:f7:c3:47:ae:4c:d5:56:2a:
1c:ae:d9:22:5c:49:e5:f8:0e:c5:2e:10:31:c0:78:84:3c:aa:
59:17:d7:6d:f5:61:e0:74:1e:54:7a:a7:a6:48:ad:5f:64:f2:
da:99:62:e2:5c:d8:6b:7c:2c:f1:94:ac:2e:49:c1:6b:47:6d:
3d:e5:07:2b:bb:9b:91:2b:35:e3:b1:cc:49:ae:98:13:75:fa:
53:1a:b6:4e:a2:f9:29:ed:8b:3a:0d:5a:5f:3e:16:a0:74:df:
19:63:61:3b:73:95:41:b1:13:36:6e:61:b0:fd:c5:46:3d:d5:
06:80:47:66:2d:9c:b1:d9:26:8d:8a:67:86:13:ea:ef:80:8b:
e8:2b:8b:e5:2f:c1:f6:3a:9c:f4:4d:8e:ce:71:1f:cd:f7:cf:
81:e9:de:29:37:5a:66:e9:d2:12:ff:fd:22:14:0c:29:34:30:
a4:f2:db:24:90:e8:3b:9f:48:ad:e3:1e:1b:5a:91:53:15:e5:
96:03:1c:ad:f9:c5:ec:5d:94:38:9b:86:fd:f1:9a:da:73:6c:
a8:69:22:c2:87:25:8d:06:6e:c2:87:0f:84:94:52:8f:34:26:
15:57:32:30:89:5f:31:dc:f7:5c:7f:6d:5f:5a:2e:d2:fd:cf:
db:d4:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:40 2026 by rpki-client