Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: ao1mXkSVA48pqmaLjqMtxcKKs6U5IfvURXEFmf8m5wo=
Subject key identifier: FC:82:F9:17:C4:4C:8D:FE:EB:35:F5:47:AD:E6:0A:2A:D3:A5:2C:49
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019E1CB49070C96B1A6D7EC6A4140E58E314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 1036
Signing time: Tue 12 May 2026 15:00:55 +0000
Manifest this update: Tue 12 May 2026 15:00:55 +0000
Manifest next update: Wed 13 May 2026 15:00:55 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: 1heslhUgUcfuYCa4FsWanhIzcOe+eZAzkUgBDqQBHHU=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:90:70:c9:6b:1a:6d:7e:c6:a4:14:0e:58:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: May 12 15:00:55 2026 GMT
Not After : May 13 15:00:55 2026 GMT
Subject: CN=fc82f917c44c8dfeeb35f547ade60a2ad3a52c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:66:9e:29:57:84:86:6e:9d:c8:d5:61:f4:
66:12:c9:aa:5f:9c:ca:9c:d8:a9:33:94:a4:06:ea:
87:97:ac:16:1d:58:b3:35:ca:14:ec:de:a4:fc:ff:
ae:0d:6a:27:12:84:8c:ba:37:a7:fe:e7:44:ef:68:
17:99:cb:32:7f:ed:44:27:8d:69:d9:e2:3c:51:9f:
02:c8:ba:9b:0f:70:1e:4e:b0:b1:87:63:ca:1e:4b:
07:33:04:52:b5:b5:81:50:16:33:e3:05:45:4b:02:
4e:1b:fa:0e:30:e1:d7:ef:ee:ec:56:99:73:2b:c9:
e7:ce:9c:b4:83:0d:f3:5e:b9:2e:9b:fa:ee:e9:11:
c2:0c:cb:3d:ec:8c:79:12:da:d0:35:4b:e3:57:2c:
2a:ef:ca:e9:38:f8:05:b9:62:20:d7:4b:45:9c:4e:
10:57:0a:ef:7d:87:ab:9d:af:b4:27:c0:fa:3c:63:
ee:b1:e8:51:fa:e8:ea:f4:f6:27:52:ed:48:86:a8:
0b:0c:34:ac:0a:c5:fb:33:c2:5f:35:e1:46:30:a3:
66:08:28:df:b8:6c:f8:8e:f0:14:99:20:6b:a9:bc:
5b:75:06:70:14:3d:97:dc:3a:2a:19:f3:e8:91:9b:
da:27:cb:7d:39:97:4e:85:d8:97:93:6d:99:68:32:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:F9:17:C4:4C:8D:FE:EB:35:F5:47:AD:E6:0A:2A:D3:A5:2C:49
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:69:aa:f4:48:97:80:d5:b0:5a:da:79:9d:d6:67:68:f7:10:
0c:72:72:da:0f:bf:0b:f8:4c:32:12:8c:38:db:c4:4a:59:5b:
17:37:96:e5:22:e5:1f:e9:6b:76:c7:b0:6a:b1:64:d6:e9:1d:
80:89:50:d4:5e:6c:91:dd:4d:ad:93:36:6e:e9:8c:75:83:6d:
e3:4f:9d:c2:5b:0c:e3:99:4d:4a:4d:b8:54:ac:9e:25:d3:70:
1f:c0:aa:a6:48:8c:54:86:b3:eb:5b:23:5e:90:85:d7:c4:84:
37:29:cd:6b:93:28:80:0f:3c:72:38:f4:f7:c0:a1:bc:a6:5b:
01:df:98:c7:0b:81:41:e3:df:d3:be:72:8f:90:35:1c:15:e8:
43:5d:88:69:1e:c7:9a:a9:c2:01:0b:d3:78:9a:81:58:4b:47:
4e:32:8f:c1:b5:79:96:e4:b2:94:53:b0:31:c1:11:35:5d:40:
e2:62:e1:c0:11:68:55:b6:c0:22:3c:c9:fc:a8:42:8f:75:02:
39:d9:f9:56:26:36:10:42:b2:9e:d8:3c:96:45:33:58:d5:15:
09:f2:e2:99:0a:bf:cc:50:8a:42:6b:c5:6a:73:f3:7c:fd:98:
47:11:d4:36:86:3a:27:e5:59:51:36:e1:72:71:12:44:3f:64:
07:f8:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:10 2026 by rpki-client