Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: VAUti7qQw9pVDp48zSTDOAXLCcljEK9ZVB4G9kDOcW0=
Subject key identifier: 2B:C4:3D:1B:7C:C1:96:B5:E0:AF:76:A8:8F:A1:B1:24:CC:F8:45:A9
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019E1D901B2260406B07FDF57022583D5899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 121C
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: qOPnVMeGKIjfT+3vwUes+PnCVT0k9zaysbtPZM1rxbk=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1b:22:60:40:6b:07:fd:f5:70:22:58:3d:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=2bc43d1b7cc196b5e0af76a88fa1b124ccf845a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:1b:e7:dc:68:a4:06:17:39:8d:02:d8:c0:
c4:88:7d:1d:54:72:53:ff:f2:ab:de:db:2f:5b:ce:
f7:b3:e1:a0:e9:d0:f6:70:ea:44:b1:de:a4:c7:a3:
33:fb:cc:3e:8a:eb:69:df:37:85:b5:1b:ca:f8:ac:
8d:61:70:e6:c0:ad:0a:12:5c:54:24:1b:b5:83:42:
96:5c:32:7e:07:17:0b:f4:c9:97:0b:71:32:e1:29:
08:c7:c3:fd:3b:45:09:6d:dc:bf:4d:ed:4b:3a:ea:
fa:46:cf:49:20:5c:df:f6:91:b8:f5:60:07:ce:e9:
84:2f:45:27:cb:a1:30:aa:d3:fd:13:e5:d5:09:78:
e0:4e:53:ae:4e:c4:18:aa:88:5d:3f:21:f5:28:7e:
4a:cb:35:7c:8b:79:1e:43:8d:a9:0c:ab:4c:80:7e:
21:24:1c:eb:11:14:2c:9b:6a:9e:2f:d6:00:a9:e0:
8c:4c:02:fe:44:69:0e:64:e2:a3:55:4d:96:78:81:
42:0a:46:c7:d5:05:03:cc:ef:58:2a:18:40:73:b8:
e6:2d:84:d7:46:9a:2e:f4:61:81:98:cd:f3:af:c1:
5d:f6:ca:4f:86:09:5f:b1:17:f6:b7:d4:73:66:3b:
2a:4e:a8:a1:3f:59:53:41:9a:98:3d:4c:ae:bb:cf:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:3D:1B:7C:C1:96:B5:E0:AF:76:A8:8F:A1:B1:24:CC:F8:45:A9
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:75:21:07:0f:fa:34:43:68:4d:45:dc:62:da:95:db:91:
aa:8f:de:a5:2d:a7:64:1a:b3:2d:15:5b:8b:1d:c6:4b:05:3f:
82:cf:01:1e:09:ad:12:16:c4:b1:3b:de:56:e9:73:2d:f7:a6:
4c:d9:7f:fd:0c:16:00:3b:5c:b2:b9:9e:8e:f6:b3:14:5d:19:
3e:0b:7c:58:e3:ca:1d:98:2e:bf:25:d7:84:90:26:81:53:87:
8d:e4:48:76:61:52:7b:8a:3c:05:f2:55:f4:9f:9a:6d:9a:15:
80:88:97:b1:25:32:63:03:9e:11:8e:0a:d3:7f:79:0e:4d:70:
41:5e:5d:07:b1:28:e7:92:5c:8b:28:43:92:75:07:5d:53:f8:
1a:21:15:ac:ca:6f:77:99:b5:b4:96:bd:83:4a:4d:ba:8c:d2:
75:d5:23:23:fa:71:02:2c:01:c2:4b:46:02:a4:6a:86:2c:07:
52:5c:84:30:1d:53:60:37:d1:93:04:3b:cc:32:c0:9e:1e:ea:
02:d9:ab:23:df:4a:18:01:b4:fa:fd:08:d5:8e:67:fa:21:38:
d9:e7:5f:04:b5:4b:3f:31:31:5a:99:56:80:1f:7f:65:ea:07:
d0:1c:29:14:1e:9d:91:18:42:75:c6:57:7e:22:5f:58:20:55:
15:17:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:44 2026 by rpki-client