Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: iUrMGszUjP1xfoCNh4S/rcrLuchaM5Kardx3tCNax5Q=
Subject key identifier: 92:68:22:49:1A:CA:EB:54:07:30:6E:32:55:C4:1D:72:95:D5:46:56
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019E30E0FDB7CA35A7DD11F1A5D8D0A5FF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0745
Signing time: Sat 16 May 2026 13:01:51 +0000
Manifest this update: Sat 16 May 2026 13:01:51 +0000
Manifest next update: Sun 17 May 2026 13:01:51 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: jvl+840uvf5AHMUTRiWqUDpp2WB7/XYyILiEsSUPum0=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:fd:b7:ca:35:a7:dd:11:f1:a5:d8:d0:a5:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: May 16 13:01:51 2026 GMT
Not After : May 17 13:01:51 2026 GMT
Subject: CN=926822491acaeb5407306e3255c41d7295d54656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:78:1c:d8:96:da:af:95:9d:54:0f:a5:98:
26:c5:a0:93:09:60:33:64:bd:47:0b:cd:d2:bd:29:
15:4a:18:db:96:8a:33:a3:ae:f5:45:88:b8:84:b1:
19:07:8b:54:dd:9f:43:ad:1e:3c:88:4b:b5:33:fc:
ee:06:84:4a:f3:b3:b3:db:5f:6d:7c:ab:f8:76:ed:
c5:f0:35:c2:49:37:9d:a2:61:93:c9:dd:ce:1f:0c:
41:85:c9:47:f4:2a:62:5a:64:6f:87:ad:49:6e:19:
8d:6a:a8:37:02:eb:14:23:e6:33:df:42:1d:62:12:
f2:3e:72:21:1e:be:4f:6d:25:f8:64:27:69:16:aa:
91:57:c1:ce:2c:64:a4:c7:15:c9:80:9b:df:42:c2:
77:8c:0e:da:eb:de:82:cf:5b:b2:05:87:e1:35:4b:
5a:f6:b9:cf:fb:ee:19:dd:7e:c2:c7:2c:de:6f:6c:
36:56:e0:db:f9:45:58:8f:63:2b:a6:bf:67:59:a7:
26:29:c1:50:89:60:e5:73:fb:26:4a:60:21:c0:fc:
03:64:87:59:79:7b:d0:a1:c7:60:43:96:9b:13:3e:
24:33:a5:74:5f:f1:69:81:9c:5d:b5:dc:34:23:fe:
4c:fb:4d:a7:df:09:99:ac:99:ab:80:96:03:ce:28:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:22:49:1A:CA:EB:54:07:30:6E:32:55:C4:1D:72:95:D5:46:56
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c6:3d:bc:33:4f:f0:85:fe:4c:c7:d2:a6:c9:dc:85:54:c5:
f5:4e:b6:a2:06:aa:38:fd:dd:d6:39:85:4a:a6:5d:59:92:e1:
75:87:3d:47:45:9a:7a:a2:a6:00:ce:14:ad:72:60:ff:0b:ca:
bb:42:a7:00:eb:e4:51:24:ca:28:73:e1:6a:a3:7f:d0:4c:9d:
5f:7e:3a:cc:9d:ff:99:03:6c:9a:f5:7a:c6:02:a6:00:0c:c3:
8d:23:a2:b7:65:61:fb:ea:53:c6:10:9a:3b:55:23:d6:b6:13:
b7:cf:f2:67:f9:9a:f4:e3:05:23:93:a1:94:9f:b9:6b:34:c8:
8c:ef:d6:c7:b1:dc:19:e5:ee:1f:d0:21:1f:ff:34:15:b3:e2:
2c:61:5f:c1:c0:12:52:d4:f8:dd:ba:77:8b:29:b4:14:35:f2:
68:db:0e:85:f7:a3:11:d0:96:ef:69:21:db:a0:86:72:12:8c:
7e:be:cb:09:90:af:4d:ec:a3:ef:c2:53:52:f0:4d:22:c2:d4:
9b:29:d0:6f:8c:4b:54:84:f3:1e:fe:1e:5a:cf:4f:7e:df:0e:
91:90:dc:67:c9:e7:7d:8e:0a:06:17:d6:8e:7e:8e:61:47:f5:
fa:6a:f0:39:80:33:ec:65:25:7b:72:40:54:ce:09:8b:e7:21:
97:c2:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client