Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: 86RQa2C9zaCq+ZaDLaaLcrlibFHSmTLChnqwrKKuL6k=
Subject key identifier: 0E:F0:B9:61:E3:A8:39:39:07:AF:72:F9:EF:1A:97:2F:85:EC:A0:AF
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 019E30E01AD974B63957579F8F5929A201FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0F9E
Signing time: Sat 16 May 2026 13:00:53 +0000
Manifest this update: Sat 16 May 2026 13:00:53 +0000
Manifest next update: Sun 17 May 2026 13:00:53 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: WWcX2AtScrDrtXpArUoBrCFhzQOVvs7YqSTxERYsb34=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:1a:d9:74:b6:39:57:57:9f:8f:59:29:a2:01:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: May 16 13:00:53 2026 GMT
Not After : May 17 13:00:53 2026 GMT
Subject: CN=0ef0b961e3a8393907af72f9ef1a972f85eca0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:24:19:b4:7b:6b:f8:93:72:bf:4d:f5:2b:
a8:15:8b:7b:03:ca:19:35:a5:1a:0b:14:cb:4a:d6:
67:a4:d9:6c:60:ef:34:da:e4:a0:6e:6a:4c:d8:a1:
09:38:71:33:fe:63:7d:89:63:8c:13:a7:8a:14:16:
ce:e5:5a:3e:97:c6:f9:be:2d:b1:8f:0d:67:69:e7:
cb:4c:66:fc:45:64:29:e1:0f:cd:d2:2c:1c:fd:65:
97:12:fa:82:76:3a:b8:e8:0d:84:dd:3c:b6:ff:21:
ac:b0:d1:76:ac:d4:d3:42:65:ce:3b:94:40:ae:aa:
ed:56:77:75:95:4c:45:e3:16:79:a2:12:5e:2b:eb:
20:df:45:95:57:2a:4d:83:35:0b:09:04:2d:f3:cc:
b1:97:70:57:d0:92:33:7a:b7:50:5a:2a:90:21:23:
66:1f:69:22:f4:ee:b6:83:12:4e:51:83:60:02:ec:
e6:f1:b5:37:41:2f:a9:76:bf:ab:d4:43:2b:37:7c:
31:d9:9c:e0:ec:eb:75:c5:1a:be:96:5c:42:50:1f:
e8:09:72:82:19:d5:06:71:f4:36:e5:b8:96:36:cc:
8f:31:ba:55:3a:3b:aa:5d:9e:f7:89:ac:dd:b0:db:
db:8b:c2:7c:b6:24:f3:d9:7c:61:cc:4a:7c:82:f5:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F0:B9:61:E3:A8:39:39:07:AF:72:F9:EF:1A:97:2F:85:EC:A0:AF
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b1:27:51:08:7d:91:e3:75:5e:d1:47:02:42:d7:c6:35:67:
11:d5:dd:c4:68:a5:43:ef:c0:46:a8:54:21:8d:03:e8:98:59:
30:79:11:a9:f6:3f:a6:52:88:30:8e:88:30:8f:a5:c3:31:d4:
54:87:d4:69:39:93:e0:19:9c:94:78:05:8b:42:8a:3b:67:eb:
3d:6d:b9:a3:1a:a9:82:8d:a7:82:7e:53:ed:1c:47:f8:ae:f7:
ab:6b:28:5e:c0:e9:1a:98:07:c6:9f:46:2b:82:fc:99:3f:83:
ae:9e:0a:10:9a:c2:d0:91:79:3e:31:48:53:fa:0f:06:46:0f:
fc:0c:dd:7f:54:54:9f:81:f1:67:3e:8e:41:c9:b6:7c:eb:22:
e5:fa:b0:c8:4f:e4:a0:e2:7e:92:4a:c0:18:18:5a:45:91:24:
e1:e9:40:4e:65:82:ec:6a:77:cd:ae:db:ac:91:19:1f:db:b9:
2c:d8:43:82:ea:48:5f:ed:d4:a5:7e:08:a3:5a:d9:60:9b:7d:
8f:e9:07:ba:0a:aa:4b:82:0a:77:f7:3e:ec:d7:60:c2:43:8c:
30:76:5d:95:8a:17:04:d5:50:87:17:9c:a1:ef:c8:a3:ee:24:
3a:18:60:a2:16:14:97:98:dc:26:c7:19:aa:d6:11:38:87:fc:
33:eb:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:03 2026 by rpki-client