Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: LA+5LErH8e8/mb+vPhokSAm9JqwpU3VmYuoE5a9wMuw=
Subject key identifier: DA:27:C3:99:50:90:87:AC:5C:EF:4A:7D:E8:46:9E:86:D0:C2:66:5C
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019E1D59663F3BA541A01EC50E762092E3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 1068
Signing time: Tue 12 May 2026 18:00:58 +0000
Manifest this update: Tue 12 May 2026 18:00:58 +0000
Manifest next update: Wed 13 May 2026 18:00:58 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: t2cPeqZqGYFUi/p+he00hvplx6CrMjfl2dvM7BIs5Ew=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:66:3f:3b:a5:41:a0:1e:c5:0e:76:20:92:e3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: May 12 18:00:58 2026 GMT
Not After : May 13 18:00:58 2026 GMT
Subject: CN=da27c399509087ac5cef4a7de8469e86d0c2665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:1f:89:58:bb:55:90:88:8e:95:5c:aa:01:
fa:cc:4c:b1:cf:b9:d2:06:d4:80:b1:cf:8e:97:6b:
3b:70:25:d1:3d:b6:f2:77:95:c2:5a:36:f6:7b:83:
aa:5b:e2:e3:4f:77:24:3b:3d:29:1d:9f:00:68:0e:
a8:7d:73:3f:37:bf:93:e2:11:a3:1e:5c:44:9f:ed:
d5:ee:bf:52:88:48:86:d1:12:79:84:2f:2a:e6:b6:
98:85:b0:2a:15:19:c8:fd:19:4f:79:4f:0b:13:27:
b5:b9:60:f7:42:1b:c7:1c:0f:0a:60:f4:80:3f:38:
32:09:60:f3:dc:66:b6:35:24:27:4d:88:9d:32:e8:
0f:1e:62:da:2a:a7:5f:c8:a4:a5:11:b9:c8:12:de:
9a:9b:a4:f7:3f:df:59:38:6d:5f:30:34:12:3c:1c:
c8:67:4a:4a:72:20:44:b8:98:87:db:ee:96:06:97:
9a:73:aa:37:64:61:10:f5:59:79:b9:f2:63:31:c3:
20:aa:c1:8d:11:11:84:c0:eb:70:9a:4a:d8:f6:57:
5e:e5:67:34:71:92:ed:7e:53:73:c5:95:ca:42:e4:
25:bd:dd:c0:73:aa:54:d6:4c:44:e4:d1:a2:c8:56:
40:ac:e2:7b:bf:1f:73:e8:13:93:8a:9b:6f:ff:8c:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:C3:99:50:90:87:AC:5C:EF:4A:7D:E8:46:9E:86:D0:C2:66:5C
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3d:b7:a8:2a:52:82:a9:ca:a8:30:47:20:c4:11:d6:1a:da:
c4:b9:b4:a2:1c:9a:22:ed:27:85:a6:96:fc:54:c6:d5:82:aa:
11:86:34:8f:ad:37:80:f2:36:6f:81:3b:39:ca:3e:11:fa:6f:
c4:2e:7f:cb:c9:2a:f7:47:41:7b:74:fb:75:79:98:9d:da:0f:
99:1d:f3:a5:8b:7d:1a:ec:96:5f:4e:56:b8:33:73:84:57:c2:
7d:ab:9b:6f:71:20:4b:73:24:03:35:00:25:50:d8:f2:3e:ed:
28:61:68:ab:b0:7b:69:4b:bd:9c:7f:d4:fc:3b:a8:b8:f8:14:
31:47:e1:49:6f:35:a0:5a:91:be:09:a7:1c:cc:74:fe:51:f1:
62:e4:8a:1e:55:c7:6c:65:27:c5:d0:d9:3f:36:b3:87:70:2c:
0b:a1:66:d7:e7:34:a2:93:09:3c:37:81:9e:04:c0:2e:9e:c1:
33:81:48:70:55:25:a5:4d:2b:f0:f6:6b:98:41:7b:f6:a3:0d:
8d:e9:49:a1:6b:9a:87:9d:5c:f2:d3:42:0e:61:52:83:ba:ef:
85:cc:ca:f9:4c:93:15:9c:da:77:2a:f5:13:b3:e3:ae:46:9d:
d3:be:35:53:b7:9f:c1:cd:04:42:ec:ee:80:3d:9b:e3:8f:e6:
02:74:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:44 2026 by rpki-client