Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: fb+msZ8iP/pCmExbegyG8zPlolNuJLAwt2giMEq/NXY=
Subject key identifier: 4D:5E:37:FE:B6:AB:4A:4D:23:D8:07:EA:DE:B8:C1:0A:28:50:CD:58
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019DFA2906C3EAD055216F961CB896099D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1908
Signing time: Tue 05 May 2026 22:01:25 +0000
Manifest this update: Tue 05 May 2026 22:01:25 +0000
Manifest next update: Wed 06 May 2026 22:01:25 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: zxeFNvm0UwwkOU3+FSyUvukUe5eJrYVBATM07No0KCA=)
2: QYmlQUAnB-0RA7OiPmhnGtJDWRg.roa (hash: 9MlbxaPMBipZRlyW5FOSHulBh31JEbALxF1O0eX7spY=)
3: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
4: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
5: yXua7TJXBD60LJFMCJknq_wF7ks.roa (hash: NlCLBspwOrofrAd3bw8GAtuiLYNcp/MexJpxkBP0so0=)
6: ytzi6QufN1uUk32LHrRjGjg4I0Y.roa (hash: Ppqw0klT6Y3utnGPV1DfUasSbbb9MUxE7bdXKc+BVXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:29:06:c3:ea:d0:55:21:6f:96:1c:b8:96:09:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: May 5 22:01:25 2026 GMT
Not After : May 6 22:01:25 2026 GMT
Subject: CN=4d5e37feb6ab4a4d23d807eadeb8c10a2850cd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:2a:a6:4d:a3:5c:67:89:bf:04:e5:ca:1c:
86:82:dd:2f:d6:7f:b4:30:9b:39:7d:f4:7e:9c:76:
b5:8e:bd:e3:d7:27:9d:35:a4:89:f0:27:9b:ca:0d:
89:37:97:ae:03:fc:83:ae:20:53:8b:88:74:2f:4d:
da:10:d6:f2:ae:bb:63:76:a8:55:8e:60:fc:4a:c0:
64:3f:5d:8b:8a:0c:b8:43:ae:3a:56:ab:20:26:8a:
19:46:b0:c1:fa:15:41:28:4f:c0:3b:0f:a8:20:84:
39:3a:47:ea:78:f6:c6:51:9d:d9:23:75:4d:7b:cf:
12:56:11:1c:a6:54:a2:a0:22:a8:9f:6a:6d:8a:e9:
e1:ed:97:1d:e8:10:b6:40:9c:94:2c:d3:d2:ae:39:
57:24:bf:8d:e9:de:03:6e:28:61:cf:35:32:ee:63:
f5:24:8a:12:97:0c:91:ff:76:45:ad:f6:c3:04:61:
74:94:6a:20:e0:9e:ac:5b:71:75:fe:69:9f:82:cc:
86:54:7d:d3:7b:9e:15:78:75:ba:2a:73:4f:d0:9f:
83:89:4b:0c:29:53:72:80:95:8a:53:7e:40:96:09:
c9:9b:57:f0:f1:87:00:cb:20:8b:89:be:61:50:e3:
e6:d9:2a:cd:e4:9b:b9:bd:ba:30:3f:67:62:54:19:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:37:FE:B6:AB:4A:4D:23:D8:07:EA:DE:B8:C1:0A:28:50:CD:58
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:5e:07:c8:d9:8e:a0:f8:f6:8c:5a:02:0b:bc:3e:bb:d4:
55:35:57:46:e3:4f:89:9c:96:e1:f1:63:92:94:cb:0c:68:23:
60:fa:75:5a:04:51:8d:1b:09:c6:45:a3:b3:29:de:04:31:f1:
49:70:40:be:83:5d:11:06:e7:3f:49:7d:b0:4c:68:b9:ba:c8:
cb:b5:5a:21:ad:d1:0c:2b:42:be:b6:da:2e:75:c8:cd:91:fd:
11:09:38:fe:32:f7:36:ed:05:33:54:f3:3b:ee:f9:02:6b:2e:
c6:4a:f5:87:ea:c1:db:d9:55:e4:19:06:5c:c0:b5:79:9a:53:
4d:e0:0d:63:b3:50:ec:d9:ab:5a:70:4b:4d:15:e7:41:ca:4a:
63:68:d7:71:39:74:be:6c:62:a6:22:ee:cc:6f:59:da:b7:83:
ff:0d:4c:58:93:30:a1:c4:d1:f8:d5:d2:92:aa:a4:19:05:f5:
f1:16:60:c0:25:32:d8:a9:dc:fd:8c:e6:1d:39:32:0a:f8:e3:
4c:0a:cf:e0:36:28:c5:49:ee:84:ca:2c:9b:b9:cd:81:f3:e6:
12:c0:06:b5:39:24:09:8a:01:e8:13:b2:59:41:6a:9b:0d:b3:
1b:91:3f:b4:2c:4f:cc:b8:2d:d4:0c:ef:83:e2:1c:94:a3:c2:
3a:9b:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:06 2026 by rpki-client