
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: b9FUCN0t0zMBVoS2jq2uVDwKzO40hfiCTGGhCZBFlrY=
Subject key identifier: 37:F4:2F:A8:22:68:AA:36:2F:BC:7B:7F:2F:BF:2C:F9:7D:83:2B:92
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019E1D22B15C5D566176173242B375C2F9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 081E
Signing time: Tue 12 May 2026 17:01:13 +0000
Manifest this update: Tue 12 May 2026 17:01:13 +0000
Manifest next update: Wed 13 May 2026 17:01:13 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: ESe0nj4hUemTOWpuovmoC7MjF9qvXUGWGLOqWv47gf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:b1:5c:5d:56:61:76:17:32:42:b3:75:c2:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: May 12 17:01:13 2026 GMT
Not After : May 13 17:01:13 2026 GMT
Subject: CN=37f42fa82268aa362fbc7b7f2fbf2cf97d832b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:2b:6e:ab:04:77:bd:f2:9b:c1:12:88:26:
0a:ca:3a:e1:e2:ba:a3:6e:25:49:62:01:01:2f:2b:
68:ff:3c:53:71:6a:ea:63:dc:80:be:5b:83:eb:16:
c4:c3:e9:23:8b:e6:d0:eb:75:b7:95:bf:f5:14:71:
59:de:0b:20:9b:c0:e8:13:9e:98:5a:ac:03:e8:0b:
5c:2d:46:d5:9a:0c:bd:2c:42:ce:47:35:0d:b9:75:
63:26:c7:f0:52:63:e6:9e:7b:87:37:5b:1b:fc:8a:
30:43:d6:58:2d:bb:8c:e5:f8:03:d4:c1:57:df:cf:
aa:ba:4e:a0:6f:89:60:9a:0c:c4:8b:28:ed:45:44:
27:f6:f1:7a:1f:14:64:94:21:8f:89:fe:85:cb:ba:
d1:d4:b1:f6:65:57:d5:37:31:32:3c:aa:11:c6:d5:
8e:7f:68:2c:28:68:37:ac:85:19:92:60:71:56:40:
24:5f:e9:ca:bc:14:fa:00:56:60:b0:65:b7:23:a4:
c5:a0:e9:93:95:4c:5f:a2:60:f8:b4:a4:73:71:06:
60:f1:33:83:0f:19:a8:33:2b:4e:fa:54:48:8f:4e:
40:6e:6d:bf:9e:f4:67:4c:50:7b:03:2b:17:36:bb:
1f:77:81:75:54:a9:50:eb:92:f8:33:9a:04:76:92:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:2F:A8:22:68:AA:36:2F:BC:7B:7F:2F:BF:2C:F9:7D:83:2B:92
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:0c:fa:f5:a0:d0:7d:a4:b7:5a:54:76:e1:47:87:71:5f:
71:b8:3c:6c:53:67:91:44:db:b2:18:75:69:63:e3:f9:02:a5:
6e:f8:40:9d:ca:75:23:ab:72:7a:12:92:a3:5c:7c:ea:9b:a5:
a9:5f:b2:3f:9f:a1:ad:1d:a8:2f:7a:4a:2c:54:60:9b:16:06:
76:3f:3b:77:0c:35:7d:8a:6a:c4:f9:6e:ae:fa:de:e3:a3:e9:
11:93:fa:fe:d6:87:a6:8f:44:77:c8:65:c8:bb:3e:5b:4e:e6:
7c:bc:e9:ef:6e:a8:d1:6c:d7:bd:be:04:4f:2a:64:51:10:46:
5c:92:74:a4:79:1b:77:4d:6f:f0:36:6a:e4:a2:21:f7:12:7d:
34:17:b2:81:a6:91:f0:b6:0d:f1:0b:7a:80:10:e3:79:1c:49:
ac:9b:ef:56:63:d2:13:0e:b4:26:81:c8:f2:8a:33:07:6d:14:
85:be:ff:3d:8a:60:32:3e:60:f4:9d:70:62:46:5e:4b:d9:ba:
c0:4b:6d:29:72:ab:f3:d9:86:f4:c0:7f:4a:cb:80:ac:e2:71:
f5:97:c8:fc:6c:b7:56:3a:ab:99:18:40:d1:a5:8a:41:b1:67:
c2:4d:2a:67:dd:7a:69:3d:2a:81:4d:f9:c0:2f:57:08:08:e6:
f0:e0:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:25 2026 by rpki-client