Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: 5OHkiVrxTB4Au17VihqBa8cZTyRdIM9aP8CSfj2fVYU=
Subject key identifier: CD:61:EC:4D:08:AA:8B:D9:FD:AA:17:81:C4:BA:44:50:A5:FF:53:8E
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 019E3185CDD07DAD43C772F9368F17A94C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 18A4
Signing time: Sat 16 May 2026 16:01:52 +0000
Manifest this update: Sat 16 May 2026 16:01:52 +0000
Manifest next update: Sun 17 May 2026 16:01:52 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: yBO53XtEIiaejXznCES7KiMC4l10IVjGTuKJLLl01b4=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:cd:d0:7d:ad:43:c7:72:f9:36:8f:17:a9:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: May 16 16:01:52 2026 GMT
Not After : May 17 16:01:52 2026 GMT
Subject: CN=cd61ec4d08aa8bd9fdaa1781c4ba4450a5ff538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:d9:14:ca:5e:18:16:ee:fc:3b:3f:dc:25:
54:da:f4:72:7f:29:f5:61:f4:e4:04:80:4b:8a:3f:
84:d3:99:be:54:42:34:f6:79:86:0a:6a:46:96:41:
e4:6e:31:b0:d5:22:f5:aa:3a:fa:b7:b5:00:da:a2:
85:df:76:3b:61:cc:43:57:6e:06:0f:d0:4e:55:4f:
e6:d1:23:98:2f:00:d3:da:8d:9f:f2:2a:c0:3d:22:
c2:7a:0b:a5:3b:ca:f2:f1:42:5e:15:bc:ce:bb:19:
c6:e5:af:9b:07:58:a7:47:f1:08:24:ef:14:10:1e:
d4:8d:a5:92:20:43:dc:7f:44:b2:e1:30:83:9d:7b:
20:70:47:47:54:52:3f:ae:1f:4b:ef:7a:29:e8:49:
44:6e:e0:d7:33:30:08:40:90:e8:3e:30:16:68:8c:
8b:66:68:27:e9:71:64:e5:91:91:df:58:76:ce:a1:
42:35:0f:74:5b:35:8f:c1:7b:1b:3b:60:f5:b6:31:
e2:dc:cf:80:c7:69:c9:be:a0:f1:06:2a:1c:a5:66:
40:13:81:ec:40:c6:dd:83:72:ee:0a:7f:ac:06:41:
5d:6c:19:04:84:f6:8d:d5:7c:9e:60:0e:d8:b0:1c:
c1:32:1d:44:6d:5a:8a:a4:26:5a:43:35:57:d6:3d:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:EC:4D:08:AA:8B:D9:FD:AA:17:81:C4:BA:44:50:A5:FF:53:8E
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:a0:de:35:3c:c0:8a:e5:c9:f5:19:68:a8:0d:d3:a0:fe:
b7:95:a7:6a:d5:6d:11:d2:2c:50:a8:36:b6:2a:81:d9:9e:b3:
53:c6:ad:1c:35:f2:c2:df:a3:94:e8:f8:38:ac:75:d5:f1:16:
b6:f2:cb:7d:af:9f:af:93:d9:ff:5e:f3:50:b2:a9:51:53:cc:
b4:e0:29:48:15:aa:f8:e4:33:86:3a:39:39:de:ef:e1:14:04:
9e:e4:9b:95:bd:ff:3a:6e:96:66:6b:06:33:7c:ab:44:51:25:
7a:c1:59:3a:fb:cf:8f:77:3c:7e:a8:62:ec:51:d3:1b:80:98:
f8:28:96:e7:90:9f:26:79:9a:ad:75:ad:a8:1b:75:08:2f:32:
8f:de:d4:65:ae:52:68:86:11:2d:0c:90:06:18:4f:ea:58:c7:
8f:5a:bd:ac:38:34:e2:75:72:27:34:ae:f3:fa:22:1a:3f:71:
6e:17:c5:41:27:6f:01:05:f2:f1:e0:8d:2b:42:47:1d:fd:04:
0b:4e:67:94:20:61:8f:fb:59:67:81:e9:76:2d:d3:ba:5c:70:
9b:2a:0f:00:6f:c6:12:a6:1b:50:58:0b:53:8a:f0:6a:bf:d2:
53:95:d5:39:99:03:70:1a:fe:fb:dd:79:79:ff:8a:42:bb:08:
56:09:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:58 2026 by rpki-client