Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: j2W9YOOXNUm5S8/s3BU8xPLFgvwiO3A0MdMe8we8vlQ=
Subject key identifier: 6E:79:D6:F6:DD:60:8A:E6:B3:17:06:7D:0F:66:4E:1C:53:44:F7:15
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019E30E070CD04C0B564D139D6EC80E9D8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 13:01:15 +0000
Manifest this update: Sat 16 May 2026 13:01:15 +0000
Manifest next update: Sun 17 May 2026 13:01:15 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: wBxF95we1P7JEI+y2QvjSAIsEf3FwXaDRqdE5f6TjSk=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:70:cd:04:c0:b5:64:d1:39:d6:ec:80:e9:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: May 16 13:01:15 2026 GMT
Not After : May 17 13:01:15 2026 GMT
Subject: CN=6e79d6f6dd608ae6b317067d0f664e1c5344f715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:dc:64:18:d0:89:13:84:00:2d:e1:2e:cf:
07:7e:5f:5f:75:e1:50:39:d1:82:33:a1:79:c3:84:
73:7d:fd:a1:9f:84:27:75:0b:32:c5:87:75:e8:39:
94:46:ef:ca:5f:a8:78:02:29:1d:0e:33:69:75:ea:
3d:32:f4:53:b3:f9:24:1e:e5:e0:3b:47:c3:2d:0c:
55:f0:ca:01:62:5a:2a:8a:73:53:03:c5:1a:27:14:
66:e1:f2:87:20:b5:8e:32:70:0b:fc:4e:38:18:3f:
2a:7b:5f:e5:7c:7d:de:d5:a8:0a:8c:8f:13:9c:63:
00:da:e9:d4:83:ad:85:2d:b3:07:48:3d:58:ff:ae:
23:6d:77:33:b5:28:66:33:ff:59:fd:b5:5b:9f:52:
f1:38:07:26:18:ee:e7:ae:af:c8:79:58:dd:d0:5d:
35:6d:c2:37:4d:5b:69:5d:be:cc:fb:a3:50:33:dc:
31:86:24:e1:f9:5d:54:39:f8:00:62:bc:bd:20:2d:
29:fa:e3:cb:ef:ad:7d:ae:2b:2d:bf:43:96:29:96:
e9:57:56:8d:72:a8:7f:6c:90:f0:93:31:9e:c0:84:
44:81:e9:9e:3a:8e:93:da:9c:c0:fe:14:8e:96:ba:
5c:5c:7c:93:4d:b1:c2:0c:1e:ef:11:ad:a8:88:d4:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:D6:F6:DD:60:8A:E6:B3:17:06:7D:0F:66:4E:1C:53:44:F7:15
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:19:ca:ca:2d:7e:b3:67:94:4c:3e:70:eb:08:f2:94:bd:4b:
02:64:55:4b:2c:05:3c:38:10:a0:15:44:10:9f:89:1a:45:46:
26:fe:25:46:ca:97:1e:4b:fa:41:89:9e:1e:71:c7:f2:45:36:
37:6d:25:5d:de:db:1d:a9:92:75:72:c6:ca:30:88:d3:61:36:
ac:7e:f0:e4:37:84:d5:f7:a8:cf:d9:92:5e:aa:05:e9:20:fd:
99:89:4b:f7:b9:47:66:ee:cd:d2:9a:44:ce:e6:46:a7:d6:46:
1e:2d:78:9c:08:b9:3b:f0:32:4b:06:f3:07:06:7b:99:ea:42:
b6:d0:8b:c9:b2:e7:3c:ae:89:82:d4:f7:53:0f:9f:e8:51:f4:
5f:fc:2e:9a:62:19:5b:e7:97:51:ab:d7:82:eb:14:ae:55:12:
f8:d7:91:f9:9c:f8:70:f7:b6:61:a3:33:74:e6:3f:4e:ba:3f:
b6:30:3c:30:16:7f:9a:f0:32:09:22:0f:7d:16:4b:42:e9:ae:
67:c4:ce:dd:a4:19:d6:1e:8a:dc:79:bd:76:03:86:a5:28:f9:
41:f1:1f:bb:d4:75:d3:11:cb:6b:2f:ab:a6:55:2e:0f:8d:76:
8d:85:46:a8:7c:67:ca:c6:d1:08:65:ac:86:ce:12:66:af:38:
ab:78:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:51 2026 by rpki-client