Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: Q7R+fJy3VQfLCN8YcmDVwwUZRzxsxvN4HXmbwYZcSGw=
Subject key identifier: 32:FA:69:6C:9B:94:FF:23:6C:36:18:7E:5D:70:9D:A8:7D:8C:20:1D
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 019E1D90B7A6D184E31FB14F3A773FC566EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0D95
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: MoYlnCijrlfZwIDIo8pkFQlG2gpl2Msr+88l84eTZR0=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b7:a6:d1:84:e3:1f:b1:4f:3a:77:3f:c5:66:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=32fa696c9b94ff236c36187e5d709da87d8c201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:0f:5e:7d:45:dc:a1:9b:7c:d3:b8:b2:bf:
b0:31:9f:1b:9d:d1:7a:d1:74:61:c9:37:89:0a:c0:
32:20:a8:45:99:9f:b8:ab:e9:d5:bd:4f:ca:93:e2:
e2:b1:93:b8:2b:57:99:44:86:3e:c7:db:6d:48:a7:
a7:3c:eb:6a:86:de:b5:8f:54:f7:de:e1:4c:fc:1a:
a3:a5:92:79:e1:65:13:fa:55:d3:d4:9b:28:ef:eb:
33:ba:e7:5a:18:9d:88:3d:b8:17:f4:e9:77:74:4d:
d1:2f:f0:54:99:03:cd:73:e6:c6:6c:b3:8a:1c:25:
9b:97:89:18:9b:00:12:54:b3:a8:9a:5f:ba:f6:08:
ca:47:4e:8f:c4:f2:f7:da:39:bc:69:f2:69:0f:25:
93:b1:8f:e2:5a:84:74:ad:5d:34:15:c9:9a:d3:33:
92:a0:3b:46:74:4c:0b:76:ae:4b:84:6b:47:6c:a7:
7a:0a:ad:70:79:bb:1e:65:29:88:5c:65:6d:8d:29:
f8:1e:ab:1d:61:ce:24:14:6e:19:e6:48:8c:30:08:
c6:55:4d:9e:32:d1:5d:3c:37:92:63:0d:fc:6b:fa:
95:d9:a2:e1:78:38:d1:f6:52:20:3a:21:7e:b9:77:
1f:ed:d3:4c:5d:ce:52:0b:14:80:30:5f:ce:87:e3:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:69:6C:9B:94:FF:23:6C:36:18:7E:5D:70:9D:A8:7D:8C:20:1D
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e7:40:15:16:9a:d0:46:a8:01:4b:fb:79:a1:75:4e:5c:20:
81:91:94:87:95:90:45:f2:2e:1e:3a:dc:47:61:bd:e3:31:18:
cd:b3:fd:e2:16:85:5f:84:85:bf:b5:a2:98:9a:ba:26:1a:aa:
74:48:da:72:98:f0:62:75:02:25:a8:b8:09:ea:28:3b:f9:08:
c9:ad:2f:ca:6a:47:a6:62:91:66:b9:c4:b1:4b:80:d5:49:d1:
49:cc:e8:dc:7c:c8:47:4d:3c:fd:2d:a8:2a:3d:52:40:05:4c:
e5:31:83:ae:9c:e6:b3:d1:38:70:5a:16:28:f3:00:b9:ba:c2:
56:56:4a:d4:4e:fa:8f:0c:b3:44:d3:d2:3f:b2:3b:af:36:19:
25:87:b9:42:40:f4:6b:56:39:7e:ca:4f:cd:73:b4:78:0a:8d:
6c:78:ef:8d:c2:fb:5c:83:1e:0f:b4:b2:47:20:ce:e5:90:3b:
d0:c7:93:91:f0:76:be:ff:fc:10:b5:e1:39:9b:68:75:09:39:
66:92:a3:3f:0d:89:86:c9:15:0c:8f:b4:41:32:07:f9:da:9f:
38:f8:55:db:b6:a3:2c:e9:3a:3d:df:85:ba:5d:f8:9f:db:52:
49:3e:b6:42:f9:52:d8:71:52:1d:d8:2f:b4:81:b7:86:e3:68:
e2:32:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:49 2026 by rpki-client