
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: B25E54r067X2XYpLlh1YQfsvmMmJwisJU2R4kYiINJA=
Subject key identifier: F1:73:13:42:1D:86:2B:45:CD:C4:D6:8B:B6:B1:3F:BB:05:08:BC:01
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019E314E2400E16AA01E0AA235B918BD6F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 0BBB
Signing time: Sat 16 May 2026 15:01:04 +0000
Manifest this update: Sat 16 May 2026 15:01:04 +0000
Manifest next update: Sun 17 May 2026 15:01:04 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: QjhkiMtFNC9LgUeikKEL5qWTgwDabd0jPl42OiL7w9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:24:00:e1:6a:a0:1e:0a:a2:35:b9:18:bd:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: May 16 15:01:04 2026 GMT
Not After : May 17 15:01:04 2026 GMT
Subject: CN=f17313421d862b45cdc4d68bb6b13fbb0508bc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:24:93:34:69:25:a2:8a:c9:64:c5:b5:01:
38:80:6b:82:33:17:73:8d:81:6a:2e:53:57:e9:7f:
53:07:31:26:3f:4b:00:93:22:5b:0e:80:41:f7:2b:
10:ea:8f:15:82:23:fd:c5:4d:7c:a3:78:2a:eb:14:
06:a9:1d:0d:e4:db:dd:73:71:34:f4:a7:67:f8:75:
32:ea:b8:3d:0e:86:e8:a7:af:54:ad:44:5a:b5:c9:
7f:85:20:8c:ce:32:18:f7:fa:83:37:6f:a2:b7:1a:
c0:a7:89:b2:e5:31:07:71:66:8b:09:ac:e9:5e:a4:
1e:05:9f:e4:97:ec:b4:f5:06:a0:de:49:2a:0f:91:
3b:8b:92:79:a2:8e:d1:33:04:fd:0e:0b:b2:39:ec:
95:31:c0:8d:bd:87:b6:d6:75:d8:2b:43:98:a5:cc:
bc:9e:39:58:fc:8f:09:e1:e3:83:aa:e6:01:21:ce:
c4:aa:ed:30:1e:18:4b:05:b1:97:84:5b:86:db:30:
28:91:9a:32:f0:73:b4:ea:fa:e2:3e:db:a4:f9:48:
e6:9e:9a:cc:86:fb:eb:b8:76:ed:1c:4b:ea:5a:24:
6e:54:2a:b5:37:ff:dd:7f:89:09:a5:55:ab:1c:6e:
05:84:68:71:b6:9c:5b:03:72:73:bf:4c:0c:fb:ca:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:13:42:1D:86:2B:45:CD:C4:D6:8B:B6:B1:3F:BB:05:08:BC:01
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:8c:96:a1:54:f8:a9:40:3c:d9:31:b0:cd:7e:a5:9c:61:
37:8f:60:97:37:f8:55:03:2c:74:39:bc:a5:e4:88:4c:fd:62:
f2:68:d1:a1:e3:7f:78:73:9c:9e:b0:c1:7b:f0:4c:40:f9:a4:
34:1f:16:1a:af:a2:62:1e:6a:58:6a:31:2a:a5:10:6f:8b:f6:
ac:64:a9:94:ee:f3:82:9a:47:83:1b:18:10:10:09:26:9e:ca:
5d:0a:25:f0:76:20:e0:dd:14:45:95:bf:e0:f0:eb:56:b2:1a:
d3:32:7d:44:06:17:ae:5f:f2:fb:7d:40:2d:06:9e:9c:f6:df:
d7:6d:15:42:2f:80:c8:55:b9:11:cc:09:41:cc:c7:ee:2e:2d:
23:93:89:79:d1:2a:96:65:4d:7e:21:0c:8a:f9:8b:f1:23:b9:
f7:95:53:05:46:5a:0f:10:6f:d1:50:df:9f:41:f0:ee:e4:56:
00:87:d0:c8:91:f1:21:9a:d0:f2:40:25:1c:51:64:ac:21:f9:
d0:a1:be:d2:7c:99:59:eb:b3:ce:a9:93:6e:0a:25:b5:ba:b1:
65:fe:f4:2e:de:b5:7e:1f:c8:c1:64:c4:51:ba:b2:a7:d3:93:
ac:87:33:7f:63:71:e2:7b:25:c7:75:86:53:52:08:1d:35:76:
68:d0:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:25 2026 by rpki-client