Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: XKksCDYpq5C5sYdikivRz5SxW5+raJOGTQeKYUUCyC4=
Subject key identifier: 4C:B8:A3:48:FA:5F:9B:61:4F:BD:51:45:02:4C:14:C2:A5:0D:1A:C4
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019E314E5C3B8FFBABD1858D2D1BC932A8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 15:01:19 +0000
Manifest this update: Sat 16 May 2026 15:01:19 +0000
Manifest next update: Sun 17 May 2026 15:01:19 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: k252au/W3NoJPzxn0N5AVxtD+kRNJ+jL3zhlP+LQOSw=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:5c:3b:8f:fb:ab:d1:85:8d:2d:1b:c9:32:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: May 16 15:01:19 2026 GMT
Not After : May 17 15:01:19 2026 GMT
Subject: CN=4cb8a348fa5f9b614fbd5145024c14c2a50d1ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:57:ab:5b:c0:44:ea:d5:b5:5f:c3:29:e8:
94:6a:ff:c1:f4:cf:d5:6d:7e:50:de:81:70:65:8d:
d5:01:64:b6:e8:63:80:99:55:6c:87:66:d2:61:a2:
7e:eb:7d:7a:cb:34:77:a6:27:a3:13:98:c6:69:6a:
6a:fc:a1:7e:07:69:1d:15:10:78:7f:8c:be:35:5f:
b5:51:e1:82:85:91:6f:18:da:f8:2e:eb:19:72:25:
1a:83:09:3b:46:22:fc:b7:24:48:79:88:01:32:71:
43:72:7c:b1:d4:ed:fb:07:03:6f:88:68:bb:dd:c8:
33:5c:7b:e6:be:76:25:b4:be:b0:f1:7f:6d:df:22:
d1:ea:41:58:d7:b7:71:03:00:d1:4c:bc:80:ce:2c:
78:8b:29:6d:a2:7b:9d:97:33:e7:4e:66:67:9e:ac:
fc:79:40:e2:a7:f6:cc:d8:4d:56:85:ae:f3:9c:6f:
29:28:22:4f:98:8b:9b:25:90:46:8c:51:f4:2a:84:
73:71:ba:d7:f1:e6:fd:29:e6:14:40:33:ca:22:e5:
96:5c:3e:bf:16:60:06:ac:f4:1e:6d:0f:f2:48:7d:
5b:7f:6c:b9:31:b1:d9:5b:7e:43:3b:4c:df:bf:30:
41:79:ca:d1:80:fd:85:e4:9e:ef:48:cd:8c:de:2a:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B8:A3:48:FA:5F:9B:61:4F:BD:51:45:02:4C:14:C2:A5:0D:1A:C4
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:71:1a:18:48:a2:4c:cf:33:5c:09:43:8f:02:a4:b1:6d:11:
cd:88:e6:a7:4d:07:66:14:21:d0:96:59:13:a5:c5:0c:7c:34:
fb:8f:c2:32:a2:2c:3d:6d:59:a4:75:9e:bc:cf:c1:a4:41:42:
90:bc:c3:bf:ed:13:d2:43:bb:1d:a3:11:dd:51:cb:6e:75:a3:
0e:eb:45:f4:b7:22:b9:72:1c:81:8d:2b:35:ab:98:33:fa:c5:
1e:bc:ef:58:63:04:ca:28:cc:c4:fb:f1:f0:f8:b0:3c:1a:fc:
2d:92:0c:41:6d:ba:93:68:8c:4f:d9:f4:50:4d:85:07:c3:95:
2a:43:ef:0b:fb:8b:09:f0:a7:ee:95:25:7e:ab:1b:1d:d1:a3:
ae:3c:26:55:43:1e:42:07:51:a2:2a:ab:9f:a6:70:78:6e:63:
e2:61:c5:5a:37:37:3b:e0:1e:45:a1:b7:53:f8:19:62:75:35:
b7:e2:77:70:bc:e7:1f:cf:b1:3d:b4:47:5c:ee:fb:d6:63:96:
a0:5c:13:cc:76:7e:a0:9e:95:6b:50:a0:4c:a9:a0:c8:be:12:
ec:b3:3a:42:29:46:dc:04:2e:d8:3e:ef:8a:e9:72:c4:0e:a3:
d7:38:17:1d:a8:08:91:8d:16:d5:e2:88:e8:9a:ff:d5:80:23:
8f:5f:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:32 2026 by rpki-client