
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: RLpykF88cZFxCNmTjd/ghgGKyHmjDjmhAtS8+N8ivLQ=
Subject key identifier: D8:20:E0:FC:29:A5:C1:FF:13:2B:7C:01:E9:69:AC:79:D7:78:7D:B6
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019E2D713E8AB3A52037147986DDAF74ECB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 0343
Signing time: Fri 15 May 2026 21:00:56 +0000
Manifest this update: Fri 15 May 2026 21:00:56 +0000
Manifest next update: Sat 16 May 2026 21:00:56 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: Ops4s4ZbJ9JLhquDwM1HZJrlSTX1SdB6gvIS+yyS7zU=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:71:3e:8a:b3:a5:20:37:14:79:86:dd:af:74:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: May 15 21:00:56 2026 GMT
Not After : May 16 21:00:56 2026 GMT
Subject: CN=d820e0fc29a5c1ff132b7c01e969ac79d7787db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:06:8b:26:e2:a5:83:91:6c:cd:d6:89:ed:
9b:2d:60:20:cf:b9:73:09:40:d1:43:62:19:26:d6:
76:f8:38:dc:91:28:2e:71:a9:05:09:74:6a:5e:c6:
ae:04:a6:26:bd:7c:b4:c3:bd:56:5e:4d:8c:fc:f8:
b1:95:b5:de:3d:0d:11:23:3e:ec:c2:fa:6d:85:d9:
c9:c6:10:82:1e:63:f5:91:68:72:86:0a:4e:a1:42:
54:33:80:42:87:1b:0c:62:63:00:a0:0e:e1:29:14:
d1:33:31:49:7f:d4:9f:88:76:54:6b:e0:10:1c:01:
2b:f9:ea:c0:2c:20:3e:9b:1a:45:e0:fa:ac:1b:be:
e7:2c:c1:a5:54:f8:94:05:89:3b:b8:50:95:67:cf:
00:2e:71:b2:cc:74:db:de:d0:32:5e:71:54:c2:98:
33:69:56:bf:ce:8f:a5:60:dd:33:0e:c6:fe:91:c2:
4b:a0:3f:a9:78:f5:6c:4d:44:52:a7:90:d3:fb:dd:
46:1c:38:06:1f:b2:29:4e:5c:5d:49:0b:92:33:4f:
5d:44:ef:6a:2d:47:1e:b2:af:15:94:ce:0a:8b:c0:
7a:d2:83:f3:b3:ca:45:a2:69:11:3e:7c:b5:2b:d7:
49:e1:e0:18:23:cc:44:a8:be:54:02:a6:14:a3:bd:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:20:E0:FC:29:A5:C1:FF:13:2B:7C:01:E9:69:AC:79:D7:78:7D:B6
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:32:ac:30:80:c8:b3:fb:62:43:f1:33:6f:8f:5b:2f:f1:04:
fc:9e:90:84:6f:55:01:f1:04:67:6c:97:7a:f9:f8:f5:20:af:
4b:12:83:4b:c4:98:09:1f:a6:fc:36:cc:98:90:9f:b4:9f:18:
34:2b:b6:23:c6:43:4e:20:a3:fb:ef:eb:ff:e2:15:42:07:d7:
9c:87:7b:cf:0c:d4:8e:d8:83:5d:69:ee:99:b4:57:ec:b9:1c:
fa:ee:0a:19:e6:c3:83:e3:34:91:ea:91:48:77:f5:a2:86:6d:
d5:34:e5:86:bd:85:c5:58:90:c2:ee:2e:8a:68:33:7c:8b:ea:
ad:f2:da:89:ff:af:37:5d:b2:b2:f5:9e:8b:df:1f:6d:dd:41:
be:bc:49:2f:51:d1:52:fa:cb:12:6e:de:f8:cc:4b:d2:bc:2d:
36:99:b7:a9:fb:cd:95:e0:b3:8b:b1:f3:74:cb:a5:83:54:1f:
05:5b:d2:b7:b2:3b:10:d8:c0:e7:10:be:69:15:f9:e1:a3:90:
a3:c5:a5:08:b9:60:1c:10:97:7d:fe:11:94:ed:6b:f2:d3:e3:
e8:2a:86:65:5e:b3:40:72:41:74:cc:bb:a0:af:88:05:73:37:
bd:25:a5:a4:40:6e:b2:d9:a7:bc:da:81:3c:5b:0e:4e:7f:d3:
fa:a9:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:15:21 2026 by rpki-client