Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: /hWEOIveRvnQygWpFspFCzhmlaVX0jvufGJvSzFcw9o=
Subject key identifier: 6C:47:D1:BB:DA:09:CE:F7:93:CE:CA:23:06:E9:7A:39:38:CF:EF:1D
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019E314E1D16C5E0BD9D2615814505DD99D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 1734
Signing time: Sat 16 May 2026 15:01:03 +0000
Manifest this update: Sat 16 May 2026 15:01:03 +0000
Manifest next update: Sun 17 May 2026 15:01:03 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: eQPP2EHdIvFqB0q0z45GzZHyOT1U5RSXqkcCouUWKQI=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:1d:16:c5:e0:bd:9d:26:15:81:45:05:dd:99:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: May 16 15:01:03 2026 GMT
Not After : May 17 15:01:03 2026 GMT
Subject: CN=6c47d1bbda09cef793ceca2306e97a3938cfef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:df:64:d0:44:c2:16:70:5f:d8:58:3c:d8:
c8:cf:00:00:75:71:5c:23:34:fb:10:fd:fd:33:17:
bd:3d:c8:9f:9d:41:9d:c7:60:82:02:1e:99:9d:e3:
97:af:80:61:9c:05:20:dd:71:cf:92:75:62:30:67:
27:c2:c3:af:ec:ca:e5:63:4e:ac:f0:e6:d3:b7:7a:
a2:1e:37:33:77:bf:c2:1e:53:2e:f8:89:f3:f8:ec:
45:4c:a5:04:56:d9:5a:dc:2f:12:de:79:a8:05:b1:
39:a9:28:73:cf:31:a3:f2:b6:63:e2:3e:2d:8c:18:
00:e7:6c:af:3d:63:bd:10:f5:b2:05:1a:68:94:4f:
71:1a:3b:ce:c8:80:5b:5c:2a:ea:98:55:fe:dd:9b:
d7:77:fa:7a:93:0e:7d:2e:a1:10:6c:f7:20:72:dc:
77:32:91:84:46:2d:a9:ca:93:23:ca:2d:88:1f:60:
7d:53:d3:94:16:e3:ac:4a:1e:25:8d:bf:3d:32:aa:
13:65:f6:61:8e:a7:0b:5e:11:02:4f:44:4e:1c:23:
ce:b5:7b:95:5a:1b:ff:05:dc:d7:48:07:d3:59:2a:
ae:76:bb:bb:f6:2d:92:77:1d:0b:94:11:36:96:f8:
fa:c1:21:ca:bf:89:a3:90:0c:cb:7c:f6:f7:6f:93:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:47:D1:BB:DA:09:CE:F7:93:CE:CA:23:06:E9:7A:39:38:CF:EF:1D
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:da:d1:25:f9:be:a6:fc:c9:60:a1:07:da:c6:d4:e9:c2:
7c:25:5f:d1:4d:57:9b:c1:91:c4:fb:52:18:52:f6:5c:b4:7e:
65:bb:80:a1:dc:94:82:63:c2:b2:c2:f7:aa:10:99:1c:53:f3:
4b:51:a9:13:20:05:c9:ae:68:1b:39:2e:9e:bc:65:cd:3c:dd:
c7:f7:57:f1:3d:99:f1:69:49:ca:77:9f:49:61:e3:80:cc:30:
3b:c0:c6:e3:38:d2:cf:2b:b3:b2:03:40:84:11:0e:f0:f1:3b:
be:b5:d2:0f:db:00:3a:ba:0c:e7:77:c1:be:83:4e:7c:24:46:
6b:b6:29:32:12:15:b2:de:fe:86:23:98:e1:79:c8:10:f4:82:
67:7e:1b:25:5f:de:4c:96:4f:38:79:74:39:7a:7b:bf:3c:e9:
2c:02:32:1e:5c:78:76:61:da:06:16:3d:5d:ed:8b:af:f2:72:
b9:80:21:5c:2b:85:a4:28:3f:56:2c:5f:bf:ea:22:79:bb:3e:
8d:0b:84:dd:f6:8a:86:d5:cd:bb:20:81:ef:42:3d:84:e5:9f:
fa:55:5a:df:86:8b:1c:bf:04:41:98:1c:b2:b0:21:b4:3a:0b:
40:f6:68:cb:18:e4:ca:de:e3:71:ac:38:57:32:28:26:de:99:
dc:8c:d5:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTh0WxeC9nSYVgUUF3ZnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJmOTY1YTllYzMzZTJjMmU4N2I2MTYxYmVlZmI4YmUy
ODZjYTMwHhcNMjYwNTE2MTUwMTAzWhcNMjYwNTE3MTUwMTAzWjAzMTEwLwYDVQQD
Eyg2YzQ3ZDFiYmRhMDljZWY3OTNjZWNhMjMwNmU5N2EzOTM4Y2ZlZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCbfZNBEwhZwX9hYPNjIzwAAdXFc
IzT7EP39Mxe9PcifnUGdx2CCAh6ZneOXr4BhnAUg3XHPknViMGcnwsOv7MrlY06s
8ObTt3qiHjczd7/CHlMu+Inz+OxFTKUEVtla3C8S3nmoBbE5qShzzzGj8rZj4j4t
jBgA52yvPWO9EPWyBRpolE9xGjvOyIBbXCrqmFX+3ZvXd/p6kw59LqEQbPcgctx3
MpGERi2pypMjyi2IH2B9U9OUFuOsSh4ljb89MqoTZfZhjqcLXhECT0ROHCPOtXuV
Whv/BdzXSAfTWSqudru79i2Sdx0LlBE2lvj6wSHKv4mjkAzLfPb3b5MlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxH0bvaCc73k87KIwbpejk4z+8dMB8GA1UdIwQY
MBaAFN4S+WWp7DPiwuh7YWG+77i+KGyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQt
YjZkMTJhYzY2ODMxLzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQtYjZkMTJhYzY2ODMx
LzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkja0SX5
vqb8yWChB9rG1OnCfCVf0U1Xm8GRxPtSGFL2XLR+ZbuAodyUgmPCssL3qhCZHFPz
S1GpEyAFya5oGzkunrxlzTzdx/dX8T2Z8WlJynefSWHjgMwwO8DG4zjSzyuzsgNA
hBEO8PE7vrXSD9sAOroM53fBvoNOfCRGa7YpMhIVst7+hiOY4XnIEPSCZ34bJV/e
TJZPOHl0OXp7vzzpLAIyHlx4dmHaBhY9Xe2Lr/JyuYAhXCuFpCg/Vixfv+oiebs+
jQuE3faKhtXNuyCB70I9hOWf+lVa34aLHL8EQZgcsrAhtDoLQPZoyxjkyt7jcaw4
VzIoJt6Z3IzVjw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:00 2026 by rpki-client