Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: poxCuJJerBCbvUYYakei0rL6YSBZXQ4JiomLlb14BmQ=
Subject key identifier: DC:A7:C7:84:E0:81:DC:12:0E:C9:28:FE:EA:2B:6E:53:0B:9A:B2:33
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 019E30A95F35950E7C77EB145B28C3EC7EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 12:01:06 +0000
Manifest this update: Sat 16 May 2026 12:01:06 +0000
Manifest next update: Sun 17 May 2026 12:01:06 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: ISTlXGH+4Sf/4A6+JVBhnPFMm7jqdSL2/eG8YW8qrzk=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:5f:35:95:0e:7c:77:eb:14:5b:28:c3:ec:7e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: May 16 12:01:06 2026 GMT
Not After : May 17 12:01:06 2026 GMT
Subject: CN=dca7c784e081dc120ec928feea2b6e530b9ab233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:b5:71:54:64:4a:d5:20:e2:a6:53:f0:9f:
89:5f:a6:58:cd:4e:3d:55:bd:73:e6:3c:7f:cf:63:
6d:17:66:59:3e:b5:fd:94:7b:25:5f:26:58:93:5d:
07:f7:9f:86:72:e2:be:81:75:ea:32:69:df:24:d5:
40:c9:f2:00:04:65:e6:33:03:9d:0e:aa:1e:84:9b:
9b:09:3f:33:11:ea:1c:1f:0f:5e:b1:d9:12:e3:56:
8f:43:4e:03:26:f3:d0:57:17:ca:bd:7a:7b:b0:34:
67:e5:02:bc:cf:a8:72:fd:9b:b0:c2:a2:df:f1:d4:
a4:54:f6:e6:36:e5:38:c0:ac:69:7d:c3:b7:d1:49:
7e:d9:08:9d:77:74:b8:9a:d8:e4:01:15:1c:fc:29:
a9:b4:e0:d6:2d:25:71:4e:42:77:47:b7:85:23:e4:
33:2e:c9:dc:7d:29:0b:ac:00:e1:69:35:51:be:42:
4e:e0:a5:fb:0c:be:ed:1b:5a:3a:6f:4f:75:8d:54:
1b:7c:5c:1d:fd:7c:93:00:95:be:23:64:aa:8a:a4:
d5:5b:fc:e2:30:10:d8:59:4a:25:9f:e8:d3:47:83:
b8:f6:11:68:19:53:01:a3:58:88:c3:56:8f:db:91:
6d:58:53:cf:ff:ec:d6:e9:ec:c9:46:c0:6c:33:87:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:C7:84:E0:81:DC:12:0E:C9:28:FE:EA:2B:6E:53:0B:9A:B2:33
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:38:b3:83:42:8f:1a:f4:d6:ee:8d:09:d3:fd:90:c4:aa:5e:
05:3a:bc:a9:99:02:89:e0:f2:d7:d8:2f:3f:e7:c3:d6:12:7d:
fd:1a:93:c2:f5:7d:39:30:51:64:1e:ba:18:f7:2c:c1:40:67:
70:9c:77:c4:92:33:ae:8a:d8:4d:13:df:68:4c:bb:7e:07:72:
18:60:49:db:e0:e1:17:0e:92:d7:30:3a:a1:17:80:be:02:ee:
d9:2d:c0:df:e6:f9:b4:f5:d3:bb:72:96:c3:93:0d:c3:64:7b:
64:28:43:07:fc:65:d3:1e:4e:32:e0:2e:8e:3a:d1:ce:7f:4d:
66:b7:c3:6f:4f:f6:dc:bd:77:1e:fd:61:48:72:0b:53:89:8b:
b3:26:aa:d4:3e:aa:d8:24:ef:80:a2:3c:46:58:22:4b:b3:e2:
41:0c:0e:5e:b8:85:af:0c:17:b0:21:e7:5f:46:a1:26:7c:f1:
67:12:a1:27:4b:e9:40:02:47:d8:9a:58:44:2a:5e:72:f6:06:
96:94:39:9f:f0:55:a5:fc:31:51:44:d9:e5:5e:13:ec:92:a5:
8a:1a:5a:2f:23:17:86:e9:07:a8:2f:04:d6:3d:9b:a9:4b:13:
00:8a:2b:2c:65:ca:4b:5e:ec:f1:da:b5:ff:60:06:94:aa:86:
c8:4a:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:32 2026 by rpki-client