Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier: 2KNGMP5+Fn0qJuj9fNfXDlzaZGjkXLEf+wqmzQ4uKYw=
Subject key identifier: 65:33:CD:74:D0:CD:BC:15:1F:59:6E:CD:9A:B8:EA:85:F7:AC:E3:7B
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019E2F9653F865E0737764F2F2A79B236EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number: 1920
Signing time: Sat 16 May 2026 07:00:41 +0000
Manifest this update: Sat 16 May 2026 07:00:41 +0000
Manifest next update: Sun 17 May 2026 07:00:41 +0000
Files and hashes: 1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: henVkF0eEVr04u5yV/qZCRa3+UmhJaFl5Be00N6yyh8=)
2: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (hash: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=)
3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:53:f8:65:e0:73:77:64:f2:f2:a7:9b:23:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: May 16 07:00:41 2026 GMT
Not After : May 17 07:00:41 2026 GMT
Subject: CN=6533cd74d0cdbc151f596ecd9ab8ea85f7ace37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:dc:89:41:d3:b7:9a:2f:8c:0e:1f:c8:7a:
18:fd:22:b7:bc:0c:44:8b:55:b7:a4:fc:09:5f:d7:
dd:73:68:e4:21:dc:3c:e8:5e:19:c1:47:51:c0:82:
c5:85:de:c8:74:13:b5:8d:22:ed:80:5a:8c:25:54:
df:59:c0:08:0f:5f:79:36:bb:30:9d:16:39:6d:a2:
59:63:dd:de:f2:80:d0:e8:77:e5:4c:9b:50:3a:a1:
02:3c:2f:09:4b:55:1e:49:eb:82:b2:1c:42:d9:e1:
2a:bc:12:75:bc:7c:7e:67:ea:3e:f6:62:95:86:5c:
77:cd:7f:37:2e:38:84:f0:e8:6d:66:76:2a:dd:d1:
83:c1:ab:5a:23:1b:b5:46:f2:9e:15:1d:3c:6b:a7:
7d:a5:12:4f:36:95:84:bf:4e:e9:04:74:d6:b7:f7:
6c:7f:b3:0d:b1:11:8a:95:9f:8d:e9:9c:d5:39:63:
00:84:93:95:51:d9:8a:f4:f2:a1:9f:17:f3:62:d7:
d1:a7:3a:db:f1:db:a4:86:eb:00:ad:06:89:f1:30:
04:bf:b4:ef:2c:00:a6:a1:0b:5c:a6:d2:2c:ee:a1:
84:cd:7c:4a:21:e2:a1:34:b9:55:ff:75:d2:ca:65:
9f:5e:50:00:e5:33:cc:88:38:77:6f:d0:56:0c:8c:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:CD:74:D0:CD:BC:15:1F:59:6E:CD:9A:B8:EA:85:F7:AC:E3:7B
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:83:4d:8a:40:18:da:4b:1a:4b:9e:da:b8:73:bf:91:07:aa:
8b:77:5d:69:35:e1:52:32:cc:d0:2f:9a:c0:46:03:a5:53:8e:
f5:42:0f:27:0d:c9:91:36:75:30:f0:ca:ca:a2:71:00:cd:b5:
36:5b:87:fb:5d:27:a8:9f:27:3a:7a:7f:1a:20:ac:1d:79:51:
e9:e0:17:8c:a5:9b:75:f8:55:f2:24:c3:6e:30:3f:b5:00:ef:
87:82:96:33:79:49:43:77:23:c2:64:ca:9d:3f:ad:6c:ae:0f:
c9:d3:43:8b:22:65:b3:2f:9f:8a:46:83:c2:7b:c8:55:c7:fb:
71:64:02:2b:7a:88:67:c1:2b:94:a3:74:34:69:0c:dd:25:8f:
f7:1f:de:f9:63:24:8d:c5:e0:9e:c3:7e:ac:9b:fe:0c:a9:6b:
62:cd:a0:b4:34:fb:09:49:66:12:32:ba:eb:f4:6c:04:b7:84:
22:8b:02:2d:a9:ed:e3:ed:be:50:e1:c0:d5:a4:44:27:8f:4c:
95:f9:cc:d1:8e:4c:cf:e1:85:b8:e2:9c:d7:b2:74:a8:bf:08:
26:db:99:24:de:3b:19:d6:9a:af:0c:5c:a4:b7:49:f8:c2:b8:
97:0e:86:d0:ae:10:92:ba:13:77:bb:a3:fa:4c:91:5c:0d:53:
e6:ce:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:35 2026 by rpki-client