Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: VgKJAYqTu6DAhidMvK60F8tOCG8+YO5AX3Kp0YOaKqQ=
Subject key identifier: EC:A6:C7:B6:05:35:E6:56:4D:B4:9C:7D:27:55:54:61:83:85:24:C3
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019E30E08FBB5B6B0A20C78DDF762343A395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0E1D
Signing time: Sat 16 May 2026 13:01:23 +0000
Manifest this update: Sat 16 May 2026 13:01:23 +0000
Manifest next update: Sun 17 May 2026 13:01:23 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: XoAW+RaBtRPFEfHbhMdbf2XKTQfYONMj8GkL4pAHiYs=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:8f:bb:5b:6b:0a:20:c7:8d:df:76:23:43:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: May 16 13:01:23 2026 GMT
Not After : May 17 13:01:23 2026 GMT
Subject: CN=eca6c7b60535e6564db49c7d27555461838524c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:b8:6b:a9:5b:c3:36:bc:bf:a3:da:ba:f4:
db:e2:f6:fa:90:04:4d:42:08:cd:50:d2:70:9c:83:
d1:00:0d:8b:8a:66:9e:02:09:dd:62:46:0e:d0:f2:
7c:d5:2a:e9:fc:94:e2:fb:2f:7d:39:07:3e:22:09:
57:57:1c:03:b8:77:da:ae:01:39:21:1f:99:dc:7b:
7e:f0:03:a6:ce:e3:bf:55:8a:6c:f4:72:54:51:5d:
f1:cf:ea:53:9a:51:b4:53:eb:ce:0d:f7:8f:07:c6:
d8:b1:de:ab:e2:55:c3:67:97:e9:1a:e6:b0:9b:b3:
90:78:41:ec:0c:97:c8:28:98:ea:0a:f1:b8:26:31:
f8:0e:12:0c:54:d6:ae:d9:3e:4e:ba:9d:ae:c4:56:
e3:d0:25:b6:da:eb:21:6a:02:c3:0f:89:ba:39:06:
f4:e6:29:70:67:33:9d:25:47:c6:d5:66:68:10:92:
2c:e6:bd:fa:54:0b:c4:5c:60:97:dd:12:0e:71:9c:
78:8a:1d:44:54:fa:dd:ef:3b:a5:9c:4f:d4:80:2a:
11:cf:20:8c:f5:f9:92:67:67:64:eb:b3:c5:5f:95:
8a:17:f7:3f:9b:33:32:57:79:c8:f4:ac:1c:65:2c:
7b:a3:de:09:ea:83:ed:6b:9b:6e:35:b2:51:ed:52:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:C7:B6:05:35:E6:56:4D:B4:9C:7D:27:55:54:61:83:85:24:C3
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:85:0f:40:4f:eb:92:9f:b2:e1:ff:2d:b8:3d:11:9e:f6:
16:1e:a5:7d:3e:5f:55:7d:8d:7a:56:52:eb:88:d7:30:e1:06:
5d:8b:14:8b:dd:42:95:47:10:03:aa:df:bb:eb:33:99:57:a2:
7f:34:ab:61:f5:de:3b:fe:44:83:c3:36:26:90:91:89:1b:80:
24:d8:41:09:21:ce:ce:e2:b0:d6:4f:36:48:78:f5:9f:59:32:
dd:67:00:2e:5b:60:4f:0a:a1:ea:57:ba:e1:36:bc:da:ab:46:
14:b5:ff:10:67:a6:9a:a1:3b:b8:e8:25:24:2d:2f:57:fb:d2:
dd:b5:86:23:38:74:2e:61:a9:d0:21:d7:35:3b:8c:ad:27:91:
59:d3:ef:5d:ff:bd:a2:0d:02:f4:b5:10:7c:58:20:c7:90:e3:
a0:61:e0:9f:af:5a:cf:a2:92:0a:30:0c:f3:af:b4:a6:f3:af:
b2:d4:22:74:b1:58:b9:44:95:2f:43:91:97:cf:9a:24:ee:2e:
70:b2:e2:96:2c:bc:31:75:b3:66:55:f0:6e:9e:52:6b:2d:d8:
73:cd:5e:c5:54:16:d4:42:7e:73:a7:4b:10:a3:32:21:60:4f:
79:17:e4:95:bf:aa:72:47:5d:fa:40:09:10:46:b7:23:82:a7:
f7:fa:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:21 2026 by rpki-client