Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: bnOZT6HYI5+o/psptw8eBPAgs26WeOKWNsUOujMGs/Q=
Subject key identifier: 88:9C:76:90:69:09:FD:B2:AA:02:DB:70:50:A3:7C:B9:7A:84:0D:FA
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019E30E09D9A438071BF9CC33CFA1B7A97D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 12F6
Signing time: Sat 16 May 2026 13:01:27 +0000
Manifest this update: Sat 16 May 2026 13:01:27 +0000
Manifest next update: Sun 17 May 2026 13:01:27 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: zxSJme5zaYvSGsUtoRGjZeTmsH3ucdukZhaOIRHz8PQ=)
2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
3: D6_vhrKcdm3SeocdHjY0RSl6kYk.roa (hash: 7HV4a9Y3R1hQs2yh9xBaiZSckY1ztfOLxpIEor4i7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:9d:9a:43:80:71:bf:9c:c3:3c:fa:1b:7a:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: May 16 13:01:27 2026 GMT
Not After : May 17 13:01:27 2026 GMT
Subject: CN=889c76906909fdb2aa02db7050a37cb97a840dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:09:c9:56:7c:47:d2:b6:98:86:3f:14:44:
7b:05:11:b1:97:a3:7f:79:6a:6e:4d:62:66:0b:31:
1b:78:6a:ad:71:a9:e6:d5:b0:1b:59:29:bd:79:cf:
4d:fd:e8:72:45:7d:63:e3:2e:54:43:a8:31:c8:a0:
eb:c6:31:4a:a6:34:fa:9f:57:bd:29:92:90:0e:5e:
f2:86:0f:3b:bf:68:79:1e:14:94:e5:85:db:76:3c:
aa:99:ac:e2:df:d6:33:c0:4f:92:b0:0a:7d:ff:5d:
41:4e:f0:85:40:7c:e6:e3:26:48:ed:1c:aa:06:cf:
ff:06:b7:4e:d1:6d:6a:2b:68:54:7d:15:b3:c5:5c:
55:be:6e:57:2c:08:95:ba:cb:56:f6:c6:d9:fa:f2:
8d:c7:45:74:80:aa:5c:e7:61:5e:ce:f1:35:7f:04:
3d:7b:b8:5c:ea:8f:eb:11:27:06:53:ba:a4:a2:5a:
83:6e:59:b8:90:dc:84:0d:13:f8:1f:14:ef:6c:5a:
61:91:4e:c1:ae:b3:6d:71:6d:0a:55:aa:ae:33:b4:
9e:58:07:13:35:cc:7e:f7:1b:23:35:78:11:9b:b7:
a3:15:51:15:b6:25:ef:88:8b:a6:73:95:ae:da:87:
5a:be:e5:f4:a2:57:26:99:1b:31:8b:c2:2d:64:78:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:76:90:69:09:FD:B2:AA:02:DB:70:50:A3:7C:B9:7A:84:0D:FA
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:55:aa:dd:f5:10:46:08:f4:58:cd:d6:82:ea:03:7e:99:1a:
4a:a0:51:b5:da:40:50:e6:74:8d:12:b6:6b:35:b3:27:1c:9a:
24:97:72:ba:a4:49:53:84:3e:23:10:d1:b5:fa:a5:65:b8:86:
ab:0c:f6:46:0f:20:f8:37:46:e4:0c:7a:aa:65:e2:37:b3:bd:
f1:15:2c:62:ff:df:af:67:e8:6e:78:62:6a:6b:81:fd:9a:ce:
05:b5:99:30:3e:a2:54:cf:7d:69:3a:dd:28:78:98:91:5a:32:
39:ae:db:31:e4:bb:b0:71:03:cc:c5:48:8e:6e:d9:df:55:67:
7b:aa:a1:e5:ef:c7:5c:70:97:25:4e:cf:81:9f:99:64:94:54:
78:df:ff:67:79:b9:6f:49:4c:88:05:96:5d:8d:b1:53:8e:d6:
fe:ee:56:b4:5d:22:da:42:f0:72:56:d3:f1:0a:ea:6b:10:35:
ca:3a:9b:fb:58:04:a4:74:96:98:2b:d9:12:ea:a4:ca:9f:49:
94:41:f9:79:fc:56:5b:96:48:62:ab:1a:79:55:c7:d3:55:64:
32:cd:f0:a8:d7:b7:a4:bf:12:89:40:01:e8:38:b9:e6:d0:2c:
b2:d2:1c:79:a1:7e:1f:f4:ca:e5:87:a0:5e:00:32:73:f6:e9:
8f:44:e4:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4J2aQ4Bxv5zDPPobepfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjYwNTE2MTMwMTI3WhcNMjYwNTE3MTMwMTI3WjAzMTEwLwYDVQQD
Eyg4ODljNzY5MDY5MDlmZGIyYWEwMmRiNzA1MGEzN2NiOTdhODQwZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQJyVZ8R9K2mIY/FER7BRGxl6N/
eWpuTWJmCzEbeGqtcanm1bAbWSm9ec9N/ehyRX1j4y5UQ6gxyKDrxjFKpjT6n1e9
KZKQDl7yhg87v2h5HhSU5YXbdjyqmazi39YzwE+SsAp9/11BTvCFQHzm4yZI7Ryq
Bs//BrdO0W1qK2hUfRWzxVxVvm5XLAiVustW9sbZ+vKNx0V0gKpc52FezvE1fwQ9
e7hc6o/rEScGU7qkolqDblm4kNyEDRP4HxTvbFphkU7BrrNtcW0KVaquM7SeWAcT
Ncx+9xsjNXgRm7ejFVEVtiXviIumc5Wu2odavuX0olcmmRsxi8ItZHg0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIicdpBpCf2yqgLbcFCjfLl6hA36MB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAylWq3fUQ
Rgj0WM3WguoDfpkaSqBRtdpAUOZ0jRK2azWzJxyaJJdyuqRJU4Q+IxDRtfqlZbiG
qwz2Rg8g+DdG5Ax6qmXiN7O98RUsYv/fr2fobnhiamuB/ZrOBbWZMD6iVM99aTrd
KHiYkVoyOa7bMeS7sHEDzMVIjm7Z31Vne6qh5e/HXHCXJU7PgZ+ZZJRUeN//Z3m5
b0lMiAWWXY2xU47W/u5WtF0i2kLwclbT8QrqaxA1yjqb+1gEpHSWmCvZEuqkyp9J
lEH5efxWW5ZIYqsaeVXH01VkMs3wqNe3pL8SiUAB6Di55tAsstIceaF+H/TK5Yeg
XgAyc/bpj0Tk+Q==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:16 2026 by rpki-client