Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: pAgd9eaQGEOwZwujUfvkuAP25g4D4powhHiZr+i7hjA=
Subject key identifier: DD:9E:A3:E0:1E:D8:E9:CE:47:06:2F:01:B9:F7:78:71:88:31:EC:1D
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 019E314E39D12F47D63AEB2C431C0216927A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 126D
Signing time: Sat 16 May 2026 15:01:10 +0000
Manifest this update: Sat 16 May 2026 15:01:10 +0000
Manifest next update: Sun 17 May 2026 15:01:10 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: lbw0ZuPyAFLTiJ0qU1j4G1voJivR7H8H5PNJOJFoi3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:39:d1:2f:47:d6:3a:eb:2c:43:1c:02:16:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: May 16 15:01:10 2026 GMT
Not After : May 17 15:01:10 2026 GMT
Subject: CN=dd9ea3e01ed8e9ce47062f01b9f778718831ec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:63:fa:65:35:38:45:dc:b1:ae:f8:47:79:
c5:f1:b1:bb:9e:03:e0:42:66:27:cc:a7:29:19:f7:
df:e0:a0:9d:67:a5:7c:a0:06:61:9a:de:a4:4c:59:
57:4e:d9:36:68:00:e4:dd:f7:2c:ba:06:43:43:97:
c4:e2:7c:63:64:c8:dd:48:aa:c8:37:db:ca:09:5c:
d6:07:a8:c0:0c:54:a0:73:b2:ab:ba:13:6d:80:7a:
c0:23:dc:6d:87:32:2e:72:b3:e4:d1:47:db:35:b2:
89:30:b3:df:e6:3b:96:7b:1e:d8:f5:ff:d4:fb:39:
bb:d2:4e:13:43:f4:5f:f7:02:cc:87:6e:2e:3f:ef:
6b:b2:41:a9:58:2f:d2:b6:6f:82:a4:67:ce:79:fa:
b7:b4:6a:9e:0e:28:55:f3:1d:7c:d7:9a:6e:3f:49:
98:74:8b:77:b8:be:26:ae:47:27:4b:d4:56:fb:1d:
db:ac:1a:7e:72:9d:82:4a:14:cd:2f:d2:11:31:33:
04:59:8a:6e:8a:07:53:57:18:d9:2e:b5:e8:5a:3e:
09:d1:cb:16:15:73:37:71:fe:48:ab:fa:1d:0f:df:
79:f1:e0:ad:d1:e6:bf:fe:85:3c:be:68:c4:ff:4b:
31:d9:f3:8a:68:6b:18:f2:3b:48:55:b3:e5:76:75:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:A3:E0:1E:D8:E9:CE:47:06:2F:01:B9:F7:78:71:88:31:EC:1D
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2e:d6:5e:0f:87:31:43:29:07:fd:3e:4f:4d:a0:1e:75:72:
19:4e:a8:b3:f7:9d:24:89:84:28:96:74:84:e0:e8:79:1a:fd:
4e:83:98:6d:af:01:3f:b2:e7:c0:b2:a2:e6:8e:81:ab:b9:74:
37:94:df:f4:dd:d0:b3:c3:ab:34:37:36:b6:39:ce:f1:76:fa:
08:4c:11:c7:42:f7:bf:4e:c7:d8:75:fb:7b:34:99:23:1b:d5:
8b:a4:20:d2:c9:db:cc:b3:7c:42:00:a6:bb:ef:ef:74:79:03:
4a:d3:d0:b1:17:6c:ce:a0:32:19:1c:c2:0c:28:32:0e:46:39:
6d:5d:7f:52:90:be:6f:73:06:33:ff:0d:b1:6f:06:8d:fa:e5:
45:99:98:52:02:2c:f0:af:ff:a5:39:29:f6:da:b6:8b:f4:00:
9f:c1:88:05:7a:6d:c3:8c:09:57:b6:72:f5:ce:58:ce:c3:21:
1e:d6:a5:25:9f:75:e9:3e:51:28:2e:74:35:4a:6a:e3:8d:28:
5c:3d:eb:8d:45:ab:06:b2:90:60:da:d5:5c:f1:be:2b:87:53:
06:b0:a8:b7:a8:37:3a:a2:f6:25:72:63:4c:cb:5b:6b:17:e4:
e6:23:bd:07:0a:71:7a:ee:ba:65:c1:ad:d6:0e:9b:ca:dd:da:
2c:70:1a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTjnRL0fWOussQxwCFpJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm
ZWY4OTIwHhcNMjYwNTE2MTUwMTEwWhcNMjYwNTE3MTUwMTEwWjAzMTEwLwYDVQQD
EyhkZDllYTNlMDFlZDhlOWNlNDcwNjJmMDFiOWY3Nzg3MTg4MzFlYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Adj+mU1OEXcsa74R3nF8bG7ngPg
QmYnzKcpGfff4KCdZ6V8oAZhmt6kTFlXTtk2aADk3fcsugZDQ5fE4nxjZMjdSKrI
N9vKCVzWB6jADFSgc7KruhNtgHrAI9xthzIucrPk0UfbNbKJMLPf5juWex7Y9f/U
+zm70k4TQ/Rf9wLMh24uP+9rskGpWC/Stm+CpGfOefq3tGqeDihV8x1815puP0mY
dIt3uL4mrkcnS9RW+x3brBp+cp2CShTNL9IRMTMEWYpuigdTVxjZLrXoWj4J0csW
FXM3cf5Iq/odD9958eCt0ea//oU8vmjE/0sx2fOKaGsY8jtIVbPldnVlEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2eo+Ae2OnORwYvAbn3eHGIMewdMB8GA1UdIwQY
MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt
MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk
LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi7WXg+H
MUMpB/0+T02gHnVyGU6os/edJImEKJZ0hODoeRr9ToOYba8BP7LnwLKi5o6Bq7l0
N5Tf9N3Qs8OrNDc2tjnO8Xb6CEwRx0L3v07H2HX7ezSZIxvVi6Qg0snbzLN8QgCm
u+/vdHkDStPQsRdszqAyGRzCDCgyDkY5bV1/UpC+b3MGM/8NsW8GjfrlRZmYUgIs
8K//pTkp9tq2i/QAn8GIBXptw4wJV7Zy9c5YzsMhHtalJZ916T5RKC50NUpq440o
XD3rjUWrBrKQYNrVXPG+K4dTBrCot6g3OqL2JXJjTMtbaxfk5iO9Bwpxeu66ZcGt
1g6byt3aLHAaVw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:53 2026 by rpki-client