Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: sXPTRzFCXAfSOO3qIu6WvwGeZ+cUzlZq6BHxr2Nz6yc=
Subject key identifier: 40:DD:AA:12:79:8F:94:C5:5A:F0:34:E7:9B:04:41:F8:E8:58:AA:CE
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019E8835CBDAA6E2F44051C498C75B0BB896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1941
Signing time: Tue 02 Jun 2026 12:01:27 +0000
Manifest this update: Tue 02 Jun 2026 12:01:27 +0000
Manifest next update: Wed 03 Jun 2026 12:01:27 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: aszmt621oijzQP6O+CnyPhza1ReOb5AGDqN/0Oqtwdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:cb:da:a6:e2:f4:40:51:c4:98:c7:5b:0b:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Jun 2 12:01:27 2026 GMT
Not After : Jun 3 12:01:27 2026 GMT
Subject: CN=40ddaa12798f94c55af034e79b0441f8e858aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:7a:03:97:e7:50:96:67:9c:6e:7d:bf:71:
8e:e6:e9:67:e3:c7:17:b1:20:de:21:0a:41:d1:53:
1c:c0:f7:2a:36:2a:cb:f9:2c:74:f8:f3:f6:a8:c6:
d1:a4:87:6e:b3:95:8d:27:f9:ab:9b:d5:c9:78:18:
5c:a4:d1:25:87:a5:74:fe:ae:b0:2f:30:cc:1b:9e:
cf:61:66:25:a6:22:f1:11:22:3f:50:9f:36:b0:9b:
cf:3d:1e:a3:4b:74:7e:2a:79:04:92:b4:b4:50:1a:
c6:1c:f6:f0:1d:3a:2a:d6:58:15:f5:0e:f0:62:cd:
d0:e5:bd:7f:b4:b5:db:2a:ac:85:6c:20:f9:ff:6f:
f1:0d:7e:4a:32:40:30:3c:f2:2c:8f:09:14:76:7a:
e1:7c:89:12:e3:e2:37:d4:ee:69:21:df:02:c0:46:
67:16:45:22:0e:a9:a6:c3:ef:09:fd:1b:70:dd:5b:
2c:6d:88:83:aa:66:f7:5f:44:f8:87:e1:96:d8:5f:
2f:f2:4a:76:46:b3:23:ee:73:ac:72:e7:92:08:d6:
7d:48:60:3c:22:0d:35:3e:76:99:3a:dd:15:31:3e:
9b:04:d3:0f:e6:1d:39:5b:34:7d:73:84:bc:4a:c3:
ea:48:85:20:d5:0b:74:b8:a6:9a:49:0c:e4:e7:f4:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:AA:12:79:8F:94:C5:5A:F0:34:E7:9B:04:41:F8:E8:58:AA:CE
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f3:25:09:af:4e:a5:3e:37:11:f8:39:ed:cd:db:c6:bd:39:
f0:b7:ab:6e:4c:5d:48:be:5f:ac:40:ce:05:ec:85:cb:8f:95:
c8:a0:87:67:ae:eb:48:3f:45:22:c5:dc:08:99:3f:ed:89:27:
8a:ac:be:28:ae:d3:a6:2f:b1:5c:b4:58:e9:c4:23:a6:53:a0:
7a:c7:b4:30:a4:de:38:ed:67:60:df:32:d1:98:2d:16:8d:34:
a5:31:f1:4f:ec:0c:48:35:35:b1:1c:b1:4c:5d:db:70:40:5c:
2c:07:61:41:ba:17:c9:bf:df:34:f1:82:ff:d6:ea:7a:cc:93:
de:6b:49:eb:37:c4:2f:3d:a4:e5:12:74:e1:ff:05:95:cd:5c:
6d:57:5d:5c:dc:76:d7:8d:ff:17:5f:e0:53:f9:4a:bd:42:19:
e8:82:b2:14:d0:b3:a1:b8:95:8f:11:86:a2:ac:49:cc:b9:cb:
95:fd:d6:8e:6f:d7:89:2f:da:12:2c:51:a6:84:13:b3:23:a0:
74:d8:08:a6:39:05:fd:52:f3:e0:42:21:0b:14:cf:0f:28:7f:
2c:01:1c:e7:9d:09:20:57:1b:2c:30:9e:28:8f:bb:d4:64:8d:
25:a1:d2:a2:52:43:46:75:13:ca:48:d7:a2:43:ad:b3:1b:b6:
84:87:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:16:28 2026 by rpki-client