Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: e6ZbwTveIaAfA/wMDx8TQvONtY5/6du+vDJ/dFFsIEk=
Subject key identifier: D7:93:5F:E2:D2:93:80:D8:CE:E6:27:03:AF:4C:14:0C:D3:49:1F:20
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 019E3117D1EB7AB0736F7D4BC3DDEE0099D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0E85
Signing time: Sat 16 May 2026 14:01:44 +0000
Manifest this update: Sat 16 May 2026 14:01:44 +0000
Manifest next update: Sun 17 May 2026 14:01:44 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: IFK9LvNrlkiaqpXBaJYuTaHesplARdx+M/kCK6fb7Cc=)
2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:d1:eb:7a:b0:73:6f:7d:4b:c3:dd:ee:00:99:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: May 16 14:01:44 2026 GMT
Not After : May 17 14:01:44 2026 GMT
Subject: CN=d7935fe2d29380d8cee62703af4c140cd3491f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:b8:ef:6e:b6:44:ac:f7:6c:58:fa:9e:9b:
e7:05:8c:a1:ea:2b:37:b9:1e:0f:93:5b:9e:cc:f2:
61:22:7a:0b:d7:de:08:6d:41:9b:a5:3b:2d:9a:e0:
82:4a:0e:80:82:1c:e0:b8:99:19:2d:83:2c:d2:50:
0e:ba:cf:dd:83:88:e1:78:35:82:b9:b8:8c:dd:57:
aa:54:3a:f7:32:aa:e2:8e:69:ec:1b:0d:2c:69:1f:
87:22:07:6b:b2:06:84:3f:09:2c:fa:db:29:31:c2:
2f:7c:2a:44:4c:62:89:8a:33:af:fc:bf:d8:23:89:
ad:c1:d9:4f:d2:97:d9:28:fa:8a:b7:b1:27:e1:e6:
16:29:ee:61:a0:a1:e9:0e:8b:e5:49:e0:39:4e:77:
65:9d:33:2a:b7:16:75:e3:37:2e:7c:da:6f:cc:d7:
cf:fd:ef:14:bc:76:ad:01:9b:ad:70:3d:9a:53:b5:
a7:ca:35:22:5b:72:70:df:b8:b8:9c:ab:71:60:12:
ab:48:84:80:89:69:ae:2b:44:3c:26:76:4a:1f:71:
88:ed:25:49:fd:d3:6f:ad:86:89:94:63:32:34:75:
7f:74:c5:d2:56:bf:3b:59:39:e3:02:f4:f0:0d:a3:
27:9a:a3:fb:57:92:f3:82:16:56:b7:2d:39:99:69:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:5F:E2:D2:93:80:D8:CE:E6:27:03:AF:4C:14:0C:D3:49:1F:20
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c6:22:a2:5f:f4:13:9c:46:55:d9:5f:d0:9c:26:47:0d:b3:
c1:60:21:ec:3b:1c:9e:e1:b0:3c:cb:5e:a2:bc:87:3a:c5:c1:
cb:dd:bf:2d:5e:1f:b9:fb:26:59:e6:8f:8f:e6:f6:af:4b:1f:
94:0b:1a:cd:c0:ae:50:d7:d0:bd:8f:a7:64:6a:21:76:88:3e:
4b:23:05:9a:9a:fc:a3:1a:ba:8b:e6:dc:08:f8:9a:31:41:71:
c9:fa:aa:29:89:00:44:00:9f:bc:c3:9d:11:70:0a:3a:2a:11:
f1:d1:d6:5b:2d:95:67:2e:84:1c:3c:c2:1d:a9:21:38:29:5b:
d1:16:81:f4:1c:45:88:b3:5b:00:e5:7e:e0:c4:9e:1a:44:37:
11:27:5e:9d:a2:90:f6:74:0e:f2:8c:c8:fb:fc:ed:50:18:4d:
e3:a5:d5:4e:e0:b0:4d:7f:55:60:9e:88:b3:fc:f7:16:a4:a1:
80:11:0b:bc:d2:b1:c9:e8:06:30:b6:22:ce:77:18:6e:77:3e:
f3:72:cd:17:31:21:37:9e:4d:92:83:d6:c7:96:d2:02:b6:fc:
db:3a:e3:17:88:96:c0:39:75:82:6d:6a:d4:6c:fe:b0:05:68:
e9:71:6c:11:85:b3:f9:21:4e:0a:5d:50:e3:f5:7a:fe:bd:c7:
54:6a:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:56 2026 by rpki-client