Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: 6+GvVFmRb0KsKyDvuBjCz1mSIAM+92HRsr0qGpiT5VE=
Subject key identifier: C1:89:BB:78:A3:82:FF:5D:CD:FC:67:00:58:07:8E:1C:DF:63:75:2C
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019E307304450105398B3953E2C26D64A022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0FEF
Signing time: Sat 16 May 2026 11:01:44 +0000
Manifest this update: Sat 16 May 2026 11:01:44 +0000
Manifest next update: Sun 17 May 2026 11:01:44 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: +BcFllbPY1O8B88MeYvMvE/RgsfJiG9D7h07nbUbwJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:04:45:01:05:39:8b:39:53:e2:c2:6d:64:a0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: May 16 11:01:44 2026 GMT
Not After : May 17 11:01:44 2026 GMT
Subject: CN=c189bb78a382ff5dcdfc670058078e1cdf63752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:71:b4:d3:db:c1:cb:12:73:ae:31:b9:23:
a2:c9:a9:29:2e:15:1d:bb:c3:f4:5d:3f:1a:2c:ab:
66:a3:f0:55:26:27:06:3d:4e:71:8a:e1:a4:53:12:
54:5f:f9:33:b3:d9:bd:5f:d3:98:fd:1d:38:56:1e:
02:cb:aa:a4:f2:66:10:3c:f3:50:9a:55:c1:ec:32:
b4:01:29:29:0e:25:05:aa:ff:b6:38:9d:20:07:33:
a8:b7:ea:ec:03:61:9f:55:95:9a:2b:ba:0a:cb:51:
af:fd:55:9d:b4:e4:6a:01:8a:9e:09:0d:26:48:79:
4e:01:98:eb:8d:d8:7e:ac:b0:7c:04:51:d4:43:61:
ca:bd:f8:00:3a:a2:e7:bd:2b:d5:be:5a:53:5e:39:
31:0e:61:23:ca:c7:a8:db:c0:29:ee:bb:27:bc:06:
4e:a7:5a:9f:75:e7:99:e5:7b:b4:7e:42:28:65:70:
27:4f:85:cf:d6:38:63:46:8e:17:49:f2:bc:26:df:
b0:28:ac:a2:91:39:d0:7f:f7:15:10:fd:7d:08:92:
bf:57:13:1b:37:56:ab:26:62:43:e1:b1:31:36:1e:
99:1b:6b:0d:74:34:6c:45:aa:b5:ce:fd:73:82:8c:
dc:73:f3:69:1d:30:35:44:1d:a8:66:bb:af:c5:42:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:BB:78:A3:82:FF:5D:CD:FC:67:00:58:07:8E:1C:DF:63:75:2C
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:12:5c:1b:0d:71:11:6c:e5:fb:05:6f:ed:74:ba:87:16:1a:
f8:16:ee:54:59:52:b7:50:06:b7:53:82:55:60:15:b6:3d:29:
92:57:c5:ed:95:ad:b7:ab:c5:18:27:c2:e0:8d:bf:73:e0:0d:
6f:b8:e9:bf:4f:2a:b9:1b:b5:5d:66:10:18:b3:e7:b4:53:6b:
d3:be:fa:5a:66:9a:bd:f9:be:f4:1a:7f:a4:7b:3c:5a:25:3f:
57:c0:05:81:92:7c:bd:01:40:f5:49:13:e8:81:b3:03:f8:be:
9a:18:1e:90:99:74:3f:30:f3:62:11:7d:e4:a4:18:5d:55:ae:
3a:c4:0c:0e:43:ed:67:9d:db:2d:de:3c:4c:e4:76:04:3f:dd:
6f:3f:c3:25:8c:50:b4:11:7a:0a:c4:47:3a:a8:a5:eb:e9:4e:
e7:f7:b3:27:7a:b7:86:99:dd:d5:d6:37:21:cf:54:bf:8f:be:
b0:33:c0:c9:2a:a4:f9:24:4a:f2:86:88:18:b3:1d:d9:9c:48:
fd:b3:83:bb:1c:01:36:90:53:ff:96:89:24:ed:32:28:e2:a7:
2e:78:2f:6c:00:03:13:5b:7d:cc:4c:e3:64:e9:ac:42:fc:47:
52:5b:dd:95:f3:a9:b5:ba:34:30:3e:2c:35:f6:dc:a0:da:9f:
43:9e:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:28 2026 by rpki-client