Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: 5YW7t5PMIrK0kekfUmAJRyJVFD84kha2k+nGLVOnt0o=
Subject key identifier: AA:13:75:7F:74:6D:45:75:D8:C6:66:E0:06:69:70:E1:26:F5:17:EE
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019E314E528140962DD0282F107D080AA473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:01:16 +0000
Manifest this update: Sat 16 May 2026 15:01:16 +0000
Manifest next update: Sun 17 May 2026 15:01:16 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: U7KETEB6Py/MIRet9tjumsPDR4XkBtPTtQA1AFh7aHc=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:52:81:40:96:2d:d0:28:2f:10:7d:08:0a:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: May 16 15:01:16 2026 GMT
Not After : May 17 15:01:16 2026 GMT
Subject: CN=aa13757f746d4575d8c666e0066970e126f517ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:75:ec:ac:bd:d6:7b:86:65:9e:fb:51:ae:
2a:2e:ad:12:3c:fb:54:d7:16:57:5e:42:5e:cd:e9:
54:ef:84:f1:be:08:0c:29:a1:23:be:0e:6c:4a:b6:
fa:dd:ea:5e:f4:02:f4:74:18:39:22:ba:3c:28:d0:
95:23:e0:dd:d0:ac:de:11:96:97:d5:84:0f:9e:6b:
15:a4:40:f6:38:f9:2b:76:f0:17:23:02:2d:be:64:
8a:62:72:c6:7c:e2:85:ca:c6:bb:89:6e:b2:09:c3:
3a:a6:1d:72:a6:27:34:c5:e1:2f:00:f1:8d:f1:6e:
88:eb:ea:3b:95:88:e9:03:6f:4a:11:55:6d:99:46:
aa:89:af:79:6f:5e:3d:27:69:b9:62:c3:e0:3a:99:
49:d3:69:b1:11:91:5c:35:a4:a7:2c:31:11:9e:c7:
cf:96:8e:2d:42:4e:a8:da:cb:81:2e:38:09:a4:e5:
61:e8:8b:b6:06:c4:26:99:33:8c:cc:62:0f:e3:46:
95:d7:50:af:1d:9e:ed:00:b5:a4:71:9e:e1:3f:0b:
f5:8a:7c:7f:29:80:9e:8f:d2:87:a1:09:53:36:e2:
53:ce:fe:2f:1a:4c:06:39:a0:15:0c:e8:c6:fe:7b:
4b:fe:6c:8a:86:df:c2:01:ce:7d:98:55:d9:11:21:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:13:75:7F:74:6D:45:75:D8:C6:66:E0:06:69:70:E1:26:F5:17:EE
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b2:dd:25:c4:4d:71:36:53:26:17:ad:d3:64:f7:c0:da:b9:
d4:f0:e6:e6:5b:ec:6f:90:4d:02:76:a5:27:82:ce:31:a2:0e:
70:08:fc:d1:26:e0:3c:f8:53:cd:cb:64:25:41:e6:18:17:21:
c4:d1:36:9b:a4:14:1d:96:7b:fa:6a:75:f2:d8:23:3e:e7:19:
be:45:c7:49:ee:7a:16:1e:55:bd:00:ed:09:e7:d2:2c:53:4c:
e5:a6:85:39:80:6e:82:05:5d:54:1b:68:28:34:dd:ed:02:65:
de:b7:43:0e:17:eb:1d:82:09:1e:6e:46:11:33:1d:04:4a:09:
90:14:cb:2b:11:68:c9:ef:63:0b:79:42:94:5f:94:12:09:25:
09:b2:21:11:27:66:e0:bf:22:80:36:19:c0:7c:de:53:a6:58:
57:30:b9:61:bb:25:50:62:e6:f7:e3:ef:5d:10:5e:7d:d4:39:
9d:bd:de:a1:39:44:d7:03:7a:91:0c:b4:6a:7f:0c:2e:ef:3f:
99:1d:b6:d8:a5:06:ba:61:c4:61:d1:01:4f:fc:45:71:e4:0d:
5a:e6:fb:3c:d0:81:f4:cc:76:a6:2d:48:3b:a2:b0:de:fb:7a:
ca:df:96:a1:b4:45:c9:2b:80:fa:9f:33:2a:6a:e2:9d:3e:66:
cb:cd:42:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTlKBQJYt0CgvEH0ICqRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzI3NmM0ZDhjZmFmYzA0YzI2Zjg1ZmIzNGZkOWVjZTQ3
Njk2OTUwHhcNMjYwNTE2MTUwMTE2WhcNMjYwNTE3MTUwMTE2WjAzMTEwLwYDVQQD
EyhhYTEzNzU3Zjc0NmQ0NTc1ZDhjNjY2ZTAwNjY5NzBlMTI2ZjUxN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxht17Ky91nuGZZ77Ua4qLq0SPPtU
1xZXXkJezelU74TxvggMKaEjvg5sSrb63epe9AL0dBg5Iro8KNCVI+Dd0KzeEZaX
1YQPnmsVpED2OPkrdvAXIwItvmSKYnLGfOKFysa7iW6yCcM6ph1ypic0xeEvAPGN
8W6I6+o7lYjpA29KEVVtmUaqia95b149J2m5YsPgOplJ02mxEZFcNaSnLDERnsfP
lo4tQk6o2suBLjgJpOVh6Iu2BsQmmTOMzGIP40aV11CvHZ7tALWkcZ7hPwv1inx/
KYCej9KHoQlTNuJTzv4vGkwGOaAVDOjG/ntL/myKht/CAc59mFXZESG0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoTdX90bUV12MZm4AZpcOEm9RfuMB8GA1UdIwQY
MBaAFP9ydsTYz6/ATCb4X7NP2ezkdpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgt
NzdmZDRkMWU1YjI2LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgtNzdmZDRkMWU1YjI2
LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabLdJcRN
cTZTJhet02T3wNq51PDm5lvsb5BNAnalJ4LOMaIOcAj80SbgPPhTzctkJUHmGBch
xNE2m6QUHZZ7+mp18tgjPucZvkXHSe56Fh5VvQDtCefSLFNM5aaFOYBuggVdVBto
KDTd7QJl3rdDDhfrHYIJHm5GETMdBEoJkBTLKxFoye9jC3lClF+UEgklCbIhESdm
4L8igDYZwHzeU6ZYVzC5YbslUGLm9+PvXRBefdQ5nb3eoTlE1wN6kQy0an8MLu8/
mR222KUGumHEYdEBT/xFceQNWub7PNCB9Mx2pi1IO6Kw3vt6yt+WobRFySuA+p8z
KmrinT5my81C7Q==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:50 2026 by rpki-client