Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: eZ03TLsE0tlvwy7HA2uS5JDnfcbBD6HZXQDsR5PuTNE=
Subject key identifier: 57:E4:21:93:B9:5F:90:6B:4F:37:82:F7:5A:90:48:39:93:B0:6D:9C
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019E2F96D8E61584F44707BC2DF0AC547E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 14F3
Signing time: Sat 16 May 2026 07:01:15 +0000
Manifest this update: Sat 16 May 2026 07:01:15 +0000
Manifest next update: Sun 17 May 2026 07:01:15 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: Lf6fEXwlV8RNYht9RY4kjA7c1RlVdQqUYNeTPojEDvk=)
2: DXnEQHiVvNu7Vyoq9JcZ6dLMCdI.roa (hash: 4AlE0r+iRVTgtlkq9V/mm0BrnXYUrFnqbuKHIAvSdgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:d8:e6:15:84:f4:47:07:bc:2d:f0:ac:54:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: May 16 07:01:15 2026 GMT
Not After : May 17 07:01:15 2026 GMT
Subject: CN=57e42193b95f906b4f3782f75a90483993b06d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:58:10:97:7d:75:5d:e9:ca:7a:7a:c6:72:
e9:c7:1a:a4:ee:fa:16:77:4c:c7:35:7f:60:34:be:
43:3f:09:87:0a:c3:fc:38:b0:62:27:e0:5c:b6:f4:
02:3f:af:17:b5:61:29:48:ff:17:46:c5:e2:95:1b:
54:1b:53:e4:06:02:56:bc:16:18:9c:5e:84:d5:2c:
d9:cb:81:1e:7c:66:98:2d:3b:d4:09:88:31:3e:a3:
c0:56:05:31:23:d6:ce:e2:14:18:ba:b7:3c:d3:c5:
9d:25:b6:d6:3f:dc:3b:79:ae:e8:5b:a8:8d:c7:fa:
65:01:db:b2:15:9c:d2:99:67:e8:aa:4d:3d:c7:4c:
2d:af:a9:f9:45:22:a8:e0:d4:e7:ee:55:4b:16:89:
b7:66:3d:5a:cd:5a:a8:14:17:3c:27:23:f9:ab:14:
50:83:88:4f:c8:6f:7a:f6:f9:99:fd:f6:23:54:46:
d5:cd:bc:7f:08:4a:ff:72:d9:77:e1:91:e0:fe:0f:
52:3d:0e:de:99:72:11:61:cb:4c:17:71:a9:84:60:
22:12:8c:85:a6:66:65:3a:3e:82:3a:b3:90:5b:fa:
70:cb:5e:d3:54:ce:ea:77:07:48:2c:6b:2c:f0:cb:
da:81:f6:5b:08:93:f1:3e:29:8b:8e:aa:23:e5:5e:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:21:93:B9:5F:90:6B:4F:37:82:F7:5A:90:48:39:93:B0:6D:9C
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:b2:9d:09:af:1d:4a:ec:42:48:6a:09:a3:6d:45:a5:c8:
6a:7e:3e:89:7f:a4:3f:1c:36:67:db:a6:bc:3f:83:a6:10:3e:
e2:bb:d0:d7:f6:c4:6e:1e:4b:39:2f:05:80:15:be:26:bb:8f:
aa:ec:7e:21:18:80:59:7a:c2:3c:9a:cd:38:10:cc:e8:52:9e:
7b:32:51:da:1a:4e:b3:d7:06:d4:7f:8a:a5:1c:42:ac:48:98:
3a:28:ca:9a:23:00:50:48:20:48:56:4f:cd:4e:60:a3:ea:5c:
71:34:b7:db:e5:9b:9e:54:5f:e4:62:7d:ef:56:88:ee:75:00:
29:f4:ad:91:f5:5f:8e:e6:ab:58:8f:c8:17:24:62:16:bd:b0:
79:f2:e6:c9:65:e4:25:f1:cf:b3:28:f4:7b:35:cb:27:93:0a:
5a:1f:63:1d:c0:ac:aa:72:18:b4:1f:df:c4:6d:57:8b:5b:d8:
b6:f3:c1:ac:47:d5:15:95:a5:c3:53:85:48:f1:ad:44:b9:0c:
b3:38:26:ab:f8:e3:bd:35:21:21:96:51:f3:2e:71:df:43:31:
95:38:3f:42:d0:59:e4:c8:1c:04:71:52:3a:27:03:86:40:60:
06:d6:23:36:96:12:3a:5a:47:82:84:8b:aa:53:b3:bd:70:e9:
d7:56:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:43 2026 by rpki-client