Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: PnkrQtxZ6HWJCiNyH5BppF+RgfFrxw2jm+yp3WzCTxs=
Subject key identifier: 80:52:33:AE:47:35:08:02:DC:6D:55:D7:64:46:6D:E1:C0:13:67:68
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019E1CB5153896E8937BF5423ABF7768DA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 15:01:29 +0000
Manifest this update: Tue 12 May 2026 15:01:29 +0000
Manifest next update: Wed 13 May 2026 15:01:29 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: bQoHdp3P5ZVGrJbScPmAFF2a+P+cCgEf8QJn+KoKf5Y=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:15:38:96:e8:93:7b:f5:42:3a:bf:77:68:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: May 12 15:01:29 2026 GMT
Not After : May 13 15:01:29 2026 GMT
Subject: CN=805233ae47350802dc6d55d764466de1c0136768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:60:c3:be:c2:32:2e:06:bc:be:ad:e1:c6:
e5:28:23:68:87:4b:4e:aa:e2:16:20:7b:56:85:5d:
20:67:83:2d:a1:68:60:c9:76:98:1c:cf:50:3d:af:
39:69:b4:3b:54:d3:54:ae:53:54:f3:02:68:47:24:
ec:bf:8a:25:a8:16:da:3c:de:49:05:1e:0f:b9:50:
7f:6a:10:a5:56:c3:08:4a:28:6a:7a:b5:66:8f:cf:
5d:41:6c:1c:38:2b:4c:8b:0c:3b:3d:1d:e2:f2:5f:
1d:1e:93:db:fe:6d:37:86:67:8e:9c:c4:c4:f4:dd:
e3:7b:90:15:72:57:31:5c:dc:4f:85:8a:99:18:ff:
19:f8:ab:90:ce:29:77:35:bb:e0:a3:bb:f1:46:0a:
84:4f:24:bf:8d:49:c9:49:e5:e4:82:b4:c1:c1:9e:
e7:d2:5b:f3:f8:2d:44:46:e2:cb:83:f0:40:63:d6:
a4:a6:b9:b9:82:b4:28:2e:f4:57:d4:61:62:5b:81:
5c:d9:9d:ec:76:73:97:06:95:e6:13:c8:1a:44:ab:
1c:71:c6:24:42:eb:77:dc:cb:38:77:b1:9b:db:a2:
f5:dd:b9:83:8c:1e:be:af:3f:cd:ce:75:6d:22:10:
04:5c:ad:1d:91:96:59:a1:a2:2d:74:01:71:29:a5:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:33:AE:47:35:08:02:DC:6D:55:D7:64:46:6D:E1:C0:13:67:68
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:de:e7:a7:53:61:db:de:3d:24:16:9f:58:db:42:47:17:
ee:55:1a:34:6f:1b:2f:fd:23:7c:a2:85:b7:da:95:4c:6f:44:
87:08:fb:d8:8c:52:07:33:52:fd:34:88:8f:08:a4:f5:be:13:
e2:91:55:6d:6b:33:87:d6:98:b5:be:24:6e:e3:7b:e4:3c:88:
66:76:c1:3f:c9:51:7d:3a:e2:fd:2d:8a:bb:77:b6:7b:8b:1f:
3e:e8:d0:c9:c2:bc:6c:0d:af:e8:69:90:d2:a6:94:33:ef:ca:
28:62:19:45:7e:37:9f:dc:5a:95:76:ae:49:15:49:63:7f:40:
0a:08:47:16:ad:a8:da:f4:af:da:97:14:a9:f8:2c:db:aa:30:
9d:28:5a:b7:b9:3c:27:1e:15:04:5e:f9:87:12:f8:53:5e:6e:
08:56:a3:fa:25:d9:1d:f6:d1:7f:2c:03:85:49:eb:e8:b8:e5:
2e:74:b1:43:b6:fd:bd:07:72:b4:fe:cb:19:4a:ab:65:44:fd:
40:ce:02:4b:14:13:dd:27:a8:78:de:eb:a5:72:34:98:68:0d:
de:87:df:a0:05:8d:23:c7:05:63:a9:e0:f9:1d:c1:99:79:99:
f4:e6:61:fb:1c:4e:e9:da:82:82:c8:03:79:52:dd:99:12:04:
c6:f1:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:56 2026 by rpki-client