Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: XM7dEjdlShQzOCZl61YSC0ZpxkWo5lcD1FzzBupjcLo=
Subject key identifier: 4F:91:47:2D:7C:CC:2E:F6:7E:CE:68:77:7E:AF:17:CB:09:CF:DF:7C
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019E330604F11E50FBC1C6E76396E1E980ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: FE
Signing time: Sat 16 May 2026 23:01:32 +0000
Manifest this update: Sat 16 May 2026 23:01:32 +0000
Manifest next update: Sun 17 May 2026 23:01:32 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: qey2j0ocDjSLGZRm2h+97cw+JE2O65ase+OxJShjt0E=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:06:04:f1:1e:50:fb:c1:c6:e7:63:96:e1:e9:80:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: May 16 23:01:32 2026 GMT
Not After : May 17 23:01:32 2026 GMT
Subject: CN=4f91472d7ccc2ef67ece68777eaf17cb09cfdf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:a4:46:ad:74:d9:3f:b0:6b:3b:c3:5c:97:
0d:97:ba:60:9a:42:9a:1b:28:b2:4e:b2:a7:cb:7b:
16:95:56:9a:a2:f5:05:a5:67:ca:68:bf:4a:8d:65:
1a:ca:db:51:c8:e4:fc:98:2f:9f:92:11:8f:98:5c:
e3:9f:b3:24:3e:b9:1e:e8:c9:f8:d4:8e:be:7f:04:
cc:4f:a4:1d:9c:bc:ac:db:63:e2:a4:c6:f6:6a:c6:
ca:85:2f:4d:4f:c4:de:3b:81:fd:96:70:c0:13:1f:
7b:0a:0a:48:a7:04:c9:19:7d:5f:03:55:0e:11:7d:
d8:45:cf:6f:d3:cc:84:e8:d6:d2:a5:6a:0b:ea:53:
4e:80:6f:eb:01:ab:89:54:21:f4:40:ba:a5:7c:f8:
0b:f3:5a:40:f9:97:e0:f7:18:f7:18:55:fc:d4:e1:
35:8c:be:d8:1c:06:5c:88:5a:78:94:29:2f:e6:ad:
28:1d:3c:9f:19:c9:20:b6:f1:ec:80:aa:d8:7a:56:
e5:42:7a:73:a5:b8:3a:78:a4:de:a7:cf:c9:46:0e:
11:03:ec:67:7c:e5:2e:6c:6e:cd:1f:10:a6:5f:42:
0f:45:8d:32:b0:82:58:8a:09:c3:03:c6:1d:52:ba:
06:f0:02:7d:9c:19:fc:ba:47:2d:df:13:1e:52:4d:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:47:2D:7C:CC:2E:F6:7E:CE:68:77:7E:AF:17:CB:09:CF:DF:7C
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:51:bb:ac:13:98:2d:5a:d7:36:ad:1c:29:e2:d7:9a:58:
a3:0f:c6:2c:30:b0:bc:d3:eb:2f:6c:fc:09:71:7c:4c:4e:62:
f3:cf:76:c5:fb:54:2f:29:67:f8:56:f3:86:85:9b:29:f7:34:
aa:69:bd:77:d6:4b:dc:98:22:dd:7e:0a:9a:df:81:0d:1d:f2:
3e:0e:ba:27:33:9d:47:b6:94:7f:4c:b7:bb:36:39:fb:98:a6:
a8:45:d6:b1:a4:ac:64:97:fc:7f:f3:ba:d1:66:1e:ac:cf:8a:
91:62:64:74:73:be:65:6c:0b:6c:ec:ed:eb:08:f2:cf:dc:ae:
c8:68:7a:cf:44:5a:ef:18:8e:fa:bc:f6:8e:fb:77:70:9d:dd:
d4:1d:ce:20:c3:23:19:3b:d8:05:f5:3f:6f:99:ea:3b:37:ea:
5a:b1:db:76:5b:92:35:91:a0:d2:79:09:8b:b0:c5:da:fd:7a:
4e:ca:0b:ea:ec:4b:be:88:0b:26:99:e7:10:f1:03:80:bd:6f:
3d:b5:11:04:5a:42:0e:8e:fe:f7:1d:a9:fe:bd:d8:35:ca:b0:
bc:8a:fc:16:03:ce:2f:8b:3b:79:90:4a:f2:42:cf:b4:fa:63:
60:18:aa:13:c9:57:7e:e9:b4:fe:ee:34:ca:16:6d:48:1d:18:
85:2c:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:43:25 2026 by rpki-client