Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: tdk8nHse+bszCp40+GGTxM1H78ofNpdSvaj3neAqYJM=
Subject key identifier: F1:8F:1B:3F:94:9C:4E:99:EC:39:7C:44:C6:E4:51:A0:D9:DF:03:0C
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019E1D908709B34E16C68CD96A689618C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 04AB
Signing time: Tue 12 May 2026 19:01:11 +0000
Manifest this update: Tue 12 May 2026 19:01:11 +0000
Manifest next update: Wed 13 May 2026 19:01:11 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: cOMYed4MyCd8PYvdWin8c9iy2mFit0wEWs04WYHUS8U=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:87:09:b3:4e:16:c6:8c:d9:6a:68:96:18:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: May 12 19:01:11 2026 GMT
Not After : May 13 19:01:11 2026 GMT
Subject: CN=f18f1b3f949c4e99ec397c44c6e451a0d9df030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:ce:2e:ff:7d:c5:db:77:49:69:f9:a6:84:
4a:ad:f1:50:d6:4a:98:08:18:61:06:0e:6a:a7:b2:
e7:a9:eb:73:4b:31:1e:fc:ce:aa:91:0f:3a:fd:a1:
41:f0:0a:56:56:03:f5:e4:55:82:6b:ff:b3:bb:97:
2e:a3:8b:28:74:7c:8e:03:cb:57:4c:f9:04:c7:7a:
ef:0b:77:b1:9d:5c:17:33:31:0e:7b:76:4d:30:03:
0b:0e:fa:a9:21:62:d9:39:12:b2:06:5a:03:2f:35:
49:82:c4:55:14:0a:90:53:6b:86:48:81:81:c3:b9:
20:ab:be:63:ed:ac:b4:ec:87:20:d4:88:cb:78:2e:
c4:8c:65:6e:5a:98:df:05:d6:f4:a5:52:32:5b:5c:
55:f3:be:88:4f:ff:c2:be:fb:b9:6c:de:85:ee:6c:
ac:03:8f:8e:20:92:d8:e5:a0:45:ad:f6:56:5b:29:
d4:8a:86:e9:68:d7:27:37:d0:07:fc:9a:ba:ea:4c:
56:7a:c7:92:31:31:da:bc:2b:48:58:b9:98:f0:27:
83:5d:99:79:d7:46:0b:ba:a3:2f:85:1b:b0:f7:67:
7b:18:fb:11:66:cf:a9:2c:01:52:b1:1a:8f:df:d3:
39:e3:20:96:0f:06:39:c3:7d:3a:7f:80:1f:ec:13:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:1B:3F:94:9C:4E:99:EC:39:7C:44:C6:E4:51:A0:D9:DF:03:0C
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:74:83:40:7a:e6:d4:5e:73:83:b2:92:d8:91:88:d4:b1:53:
88:3c:d1:94:45:93:90:44:d9:ca:fa:67:a9:59:f7:aa:9c:2c:
46:8f:68:8e:d2:c1:bd:67:8a:98:5d:65:ca:3d:23:1c:00:42:
e5:5f:b6:47:ff:80:bb:b6:56:80:ca:df:ea:a8:61:fc:bb:8e:
ea:a7:31:51:32:c1:0f:02:38:43:80:a9:dd:a2:d9:84:64:c5:
85:5f:6f:aa:21:70:19:5f:b3:82:49:5e:44:d2:8a:6e:c6:fb:
0f:f8:f1:49:d2:c2:4f:38:93:b0:97:d7:1b:29:27:20:9b:64:
9e:3a:24:46:41:c7:6d:bf:0c:12:0f:57:2b:b8:a7:2e:4f:11:
5a:14:44:a8:ec:fe:b3:b7:32:ce:e0:b0:c5:5f:26:9c:6b:c5:
e4:fa:6c:53:ef:59:bb:43:50:62:3c:03:c1:7f:25:44:97:7e:
08:07:1d:f8:29:4b:97:41:e3:27:e3:25:0e:47:5f:dc:a8:3f:
16:60:27:09:81:fd:9e:b0:86:1f:91:0f:7d:d2:64:d8:aa:67:
39:39:db:29:40:b6:00:d2:c9:f6:fe:7c:dd:6a:b6:4f:aa:56:
d2:bc:f5:04:9e:82:cc:32:ee:4f:ae:53:8b:10:ce:cd:7b:9a:
82:00:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:47 2026 by rpki-client