Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: xFDWJkwpQ/rNrM8hJ8A4Ri6QB9Q1RsQ1tstCNS14wpY=
Subject key identifier: 9E:7E:25:CF:D5:76:F5:BA:25:CB:D7:AF:71:91:0E:D5:FD:64:82:98
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019E3004F18AA0597E081482E9610CD155DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 07DB
Signing time: Sat 16 May 2026 09:01:30 +0000
Manifest this update: Sat 16 May 2026 09:01:30 +0000
Manifest next update: Sun 17 May 2026 09:01:30 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: d/kR3rYQBJVT/We3UvyukDK7Qh1OW4svpRzWeXBiEn0=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f1:8a:a0:59:7e:08:14:82:e9:61:0c:d1:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: May 16 09:01:30 2026 GMT
Not After : May 17 09:01:30 2026 GMT
Subject: CN=9e7e25cfd576f5ba25cbd7af71910ed5fd648298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:86:62:38:e9:f3:8b:1f:ba:d9:13:29:20:
b3:ac:8a:e7:8e:c5:aa:62:5b:99:ec:88:1d:70:e0:
a8:d1:07:8c:3b:80:23:0e:e9:f2:70:59:ef:d3:a9:
b6:56:9c:08:c2:76:fe:db:7c:3d:ba:c9:73:37:a3:
03:2b:13:d4:97:57:f5:ae:c1:4a:34:62:51:92:48:
17:ce:ef:8a:fe:84:6a:df:20:b6:ba:82:01:96:8f:
02:74:52:51:0c:bc:e1:6c:5e:c1:3a:7d:b9:55:ea:
b2:83:9e:05:c0:58:f4:08:57:62:04:74:8d:ce:9f:
ad:d6:20:ed:5b:a4:9e:38:e6:f0:50:ad:cc:76:a7:
b7:96:a1:9e:97:cb:69:fc:c1:37:a6:d8:ff:ef:df:
ff:7c:d6:81:e9:c0:86:c1:45:02:42:06:9c:56:39:
2f:64:01:1b:eb:f4:ca:49:5a:a1:7b:94:71:2c:5e:
57:5a:d4:e1:49:81:ab:dd:1b:73:c5:5a:f9:6f:79:
04:86:2f:7e:4f:26:85:d4:c7:04:8d:36:e2:fc:20:
e9:24:1b:0f:2d:29:d6:a5:7d:56:b4:3b:59:dd:5d:
87:aa:de:56:05:da:cb:17:03:ea:38:e5:41:98:7b:
ce:bf:2e:2c:d0:2c:d7:69:d2:23:6b:78:a4:8e:68:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:25:CF:D5:76:F5:BA:25:CB:D7:AF:71:91:0E:D5:FD:64:82:98
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:ca:a7:11:de:c8:32:44:3d:cb:ca:84:e2:08:33:25:86:
c6:9d:26:4e:9b:57:d6:2c:a4:09:3b:49:b8:fc:e6:ed:dd:03:
ef:b9:db:93:be:e8:33:35:ae:f8:5b:10:bf:33:5d:6e:82:2a:
8b:2f:ac:ae:50:b0:d1:01:7b:08:0b:f2:90:8b:ca:d6:95:90:
f8:f7:93:fb:76:2d:1d:0d:97:73:20:bf:88:e2:e1:05:a0:f7:
9a:2b:16:f7:2b:95:cb:6d:b6:c7:bf:99:80:e3:92:5f:83:2c:
37:8b:72:fa:4f:47:d3:ea:e5:58:7b:56:4c:eb:bb:ea:d6:de:
dd:5b:1a:33:da:aa:be:69:6f:85:42:e4:87:61:89:5b:37:03:
ce:8c:5e:2b:e5:f5:33:d1:0c:45:96:79:02:b0:53:18:56:df:
5a:b6:f0:ea:2c:66:c9:1f:0a:c8:ae:d4:b5:cd:16:26:52:7f:
26:bf:7a:ff:c7:44:fd:db:ef:76:23:c5:38:d9:58:67:b1:17:
fc:b9:ed:71:32:7b:d3:4c:bb:af:1b:99:fe:f2:6e:e2:9d:12:
f2:95:d8:0c:d3:e9:a5:fb:97:73:00:84:89:79:36:f1:b1:c2:
bd:53:3e:0d:78:9e:50:0e:25:0d:db:e7:0a:17:89:d2:87:e8:
ff:38:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:46 2026 by rpki-client