Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
File: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft (raw, json)
Hash identifier: kolZx+mfyiOsIsH6yoci5cXdlFfN4rTDt2jzVQ7JWFg=
Subject key identifier: D4:CB:64:75:51:3A:83:E2:8D:62:DB:FB:C8:F3:85:54:FF:E0:0E:C3
Authority key identifier: DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
Certificate issuer: /CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Certificate serial: 019E1C0FBAC5E0DBA2D194659EB6F88A468F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
Manifest number: 39
Signing time: Tue 12 May 2026 12:00:53 +0000
Manifest this update: Tue 12 May 2026 12:00:53 +0000
Manifest next update: Wed 13 May 2026 12:00:53 +0000
Files and hashes: 1: 3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl (hash: Lrkcj0xr6379iLr0tj/KKJB7RCMUwxw8wUQrJg4GYeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ba:c5:e0:db:a2:d1:94:65:9e:b6:f8:8a:46:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6ccdc578e5b7cc975e9f538eb941f192ad428b
Validity
Not Before: May 12 12:00:53 2026 GMT
Not After : May 13 12:00:53 2026 GMT
Subject: CN=d4cb6475513a83e28d62dbfbc8f38554ffe00ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:9e:2a:4e:f7:a0:0c:c7:23:6a:58:cb:74:
73:1a:9c:f8:ca:e2:dc:6d:34:09:fa:f5:41:8c:4e:
7e:e3:79:87:5e:f2:26:9a:9b:e9:17:61:72:79:70:
71:e2:54:b8:ee:6b:e2:77:c8:d4:d5:21:83:dc:da:
8c:5d:e3:ef:a0:ed:a2:7c:9e:08:a3:0e:20:d2:21:
0e:2f:2a:c0:2c:e1:ed:ac:dd:5e:57:d4:54:1b:cd:
54:6f:cc:5c:87:1d:a1:dd:ba:f8:18:12:61:cc:30:
d9:74:eb:af:4f:01:d6:1d:c5:7e:93:ce:e7:d7:a5:
d8:96:d3:f2:9c:d5:1a:de:45:60:c9:d1:8b:93:c4:
2c:bb:b7:cb:0f:e1:6f:74:79:2e:0b:b1:e0:61:63:
93:27:db:ed:6a:df:68:06:e2:a4:a4:89:49:46:77:
88:0c:50:ff:2d:db:5f:b5:8f:ab:86:04:45:56:d7:
56:52:f8:ab:b5:69:d5:21:cc:d4:7c:ff:7f:52:2b:
fc:97:dd:c1:c1:45:7d:27:b1:ea:01:9d:77:ba:e9:
f1:a8:8e:b3:8e:f8:83:8b:c6:7a:59:2b:88:6e:40:
31:76:05:cf:e2:6e:a8:ed:2e:73:18:9f:71:83:55:
49:43:33:5d:52:c6:28:4e:64:04:52:e6:c7:f3:d4:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:64:75:51:3A:83:E2:8D:62:DB:FB:C8:F3:85:54:FF:E0:0E:C3
X509v3 Authority Key Identifier:
keyid:DD:6C:CD:C5:78:E5:B7:CC:97:5E:9F:53:8E:B9:41:F1:92:AD:42:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WzNxXjlt8yXXp9TjrlB8ZKtQos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d7b9f-f534-453a-8d52-9b0fbbab8124/1/3WzNxXjlt8yXXp9TjrlB8ZKtQos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:77:82:55:b4:13:a1:63:cf:ea:5c:a9:df:d3:7b:6d:92:2f:
29:2f:4e:a8:91:e0:22:7d:3c:62:bc:a8:40:fb:5c:c6:e4:f3:
69:56:f5:52:22:7d:a2:ce:b7:44:1f:be:43:5c:68:21:06:5c:
23:5c:11:cb:36:38:e0:de:76:2d:4e:65:fb:f4:97:4d:e4:15:
ce:a3:bb:ae:a8:5c:c0:4a:75:90:6c:d5:95:6b:3b:c1:6e:fc:
be:5e:0f:81:8f:3e:a5:ab:c9:17:2e:d1:d6:ed:a1:e6:7f:0f:
76:64:d1:c2:02:ec:3c:62:a9:11:26:1a:e2:c8:5e:d1:a4:59:
53:da:b1:51:53:73:48:6e:1b:14:5f:a2:8b:a9:9c:b3:df:28:
90:c5:49:0f:ae:8f:f3:dc:5c:4d:be:48:33:79:2c:7e:7d:4c:
be:4f:d1:46:cd:7a:58:b5:c1:bf:dc:8c:ff:f4:41:90:9d:f1:
6f:e9:f0:28:3a:cf:79:f0:25:d5:3a:ef:09:fc:6d:89:4d:d7:
30:86:75:cd:7e:65:22:fd:e4:33:db:1b:85:b0:13:1c:0f:e7:
91:a3:c6:56:a2:4f:7a:a5:90:3d:f8:b8:18:b2:e0:bc:00:c4:
df:31:80:f2:21:10:0a:02:7f:34:1a:fe:c8:9c:aa:7c:1a:b0:
12:68:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:17 2026 by rpki-client