Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: wyfTKtD4CWFqAxfzOu3gdb0Z5ByoBdR1GHmbtKKtV/8=
Subject key identifier: 95:68:29:E4:90:9A:65:13:7B:5E:11:88:22:EE:B2:DD:C4:63:3A:D5
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019E30E0DA7CA4485C784A261698D2AF9FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0B39
Signing time: Sat 16 May 2026 13:01:42 +0000
Manifest this update: Sat 16 May 2026 13:01:42 +0000
Manifest next update: Sun 17 May 2026 13:01:42 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: wG5TrtLRsNPP3+aSvruFk8u0ejcPvC3Ob/hQlMlS1iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:da:7c:a4:48:5c:78:4a:26:16:98:d2:af:9f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: May 16 13:01:42 2026 GMT
Not After : May 17 13:01:42 2026 GMT
Subject: CN=956829e4909a65137b5e118822eeb2ddc4633ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:19:bf:b8:ac:e4:b0:fb:4f:c5:fe:68:da:cf:
43:25:6a:8d:00:36:fe:60:d4:cb:58:1b:87:df:2f:
24:15:53:07:8e:1f:54:d3:d9:17:9d:28:84:fb:21:
42:85:32:53:cc:99:5d:fe:be:f0:e9:cf:4a:cc:e1:
18:4e:ec:ae:4e:4b:60:bd:86:b7:84:8b:db:e4:eb:
64:f2:15:3c:57:e4:85:0f:00:a4:4f:b2:13:38:a2:
6e:f3:61:3f:30:bc:b1:fe:ab:62:c7:29:82:95:5a:
59:54:06:d9:f5:5f:84:32:6f:4a:bc:e2:d9:5d:c5:
45:c5:d0:4c:99:b7:ad:15:ea:01:49:5d:9d:3b:d5:
2e:2f:a3:b9:be:f9:56:90:ef:a7:95:66:a5:1f:11:
c6:57:6d:35:1f:aa:cf:f2:f8:0f:22:ba:39:ec:4a:
8f:86:96:03:65:c9:f3:3a:ec:13:3c:04:9d:e3:90:
06:8f:2c:28:8e:17:15:20:53:3f:5d:13:f5:cd:2e:
36:00:25:6d:b7:a2:44:d7:be:0e:c9:76:6c:44:5b:
9d:ba:5f:6a:5c:6f:e1:a5:3a:ff:8e:e4:bc:5a:5e:
59:9c:f4:bb:14:c4:19:f4:83:83:d1:20:68:a1:31:
d3:c1:ee:0c:f0:e6:4d:6b:d9:19:fe:2a:7b:5f:dc:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:29:E4:90:9A:65:13:7B:5E:11:88:22:EE:B2:DD:C4:63:3A:D5
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:39:a1:3d:15:54:fb:ce:e0:29:08:e9:ac:aa:94:87:6f:
8f:2a:cc:5d:c5:a6:f7:1c:af:db:53:fc:9d:7e:c5:34:03:28:
b0:4c:6b:03:28:eb:2d:f7:09:cc:e4:2e:da:92:7d:4b:b8:48:
0b:ac:bd:4f:cf:92:21:39:8a:ac:cc:77:19:83:f1:a0:a2:81:
a7:30:03:df:6c:08:2f:39:db:73:a0:0c:47:1f:c0:d7:7a:4e:
a1:fe:8f:53:c6:30:f3:53:f5:6c:c9:06:ac:57:ed:2c:75:9c:
fb:15:ed:ba:89:2b:17:47:ce:e4:08:d9:86:8c:91:13:c6:09:
d3:47:62:67:b2:ba:e4:da:86:43:37:9e:3d:1d:d1:fa:6e:d5:
80:ea:0b:d3:ec:ef:e9:bf:14:ce:c8:1e:7d:9b:ef:a4:7b:cc:
30:7b:b2:1e:b4:71:eb:b6:59:44:e0:6c:40:f4:ca:3a:28:46:
ef:3c:46:d3:c9:3b:55:59:37:dd:6e:67:e6:03:a8:71:f8:ce:
63:b0:e6:e2:4d:9c:cd:05:57:ee:99:b3:a4:8f:6f:e3:3c:bf:
93:0d:7c:59:85:18:d1:14:f1:f3:78:f2:f7:65:83:b4:b6:33:
17:87:b2:db:6c:7b:f5:7b:5c:f2:23:82:41:76:56:ba:2a:f8:
b1:0d:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:46 2026 by rpki-client