Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: jgYkyFGd7XZCCA5OPEbrclpoRUiYUMIJpne90dR8fiI=
Subject key identifier: 31:7C:5D:6E:53:23:9E:C6:B6:E1:64:E2:DB:27:4F:39:9D:66:21:12
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019E307288430C8C136976FF87870B6096B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1443
Signing time: Sat 16 May 2026 11:01:12 +0000
Manifest this update: Sat 16 May 2026 11:01:12 +0000
Manifest next update: Sun 17 May 2026 11:01:12 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: MD+0fThKj+7adNNkiMCJJyMF45xuWMs48tB8388ztxY=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:88:43:0c:8c:13:69:76:ff:87:87:0b:60:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: May 16 11:01:12 2026 GMT
Not After : May 17 11:01:12 2026 GMT
Subject: CN=317c5d6e53239ec6b6e164e2db274f399d662112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:bf:c5:2c:c3:0a:f3:c9:7a:37:f3:d1:5f:
4b:fb:24:92:e6:10:f0:24:94:78:95:0f:cb:55:a1:
bb:83:50:6f:f0:c0:0e:f5:a6:50:c0:b2:e9:07:f1:
42:f5:20:e0:85:83:f0:47:87:88:2e:88:5a:d1:3f:
ae:e1:78:c0:0a:61:13:4c:f1:e0:93:34:96:43:08:
71:30:81:d9:b2:88:e1:a2:45:f6:53:94:0a:64:ce:
37:00:4b:b8:e4:e3:0e:46:69:be:df:59:9b:e0:21:
a0:09:03:a4:02:6f:dd:05:d5:2e:fe:b2:f5:f9:d3:
82:58:e8:d0:99:92:32:fd:b6:d9:07:ea:92:55:30:
fc:aa:8c:7e:45:98:3f:24:2e:39:e9:6e:14:94:10:
16:4a:2d:d3:c9:68:76:8a:9e:34:07:84:a6:1c:f8:
5b:b3:40:91:a2:6c:86:db:64:97:eb:50:b7:f4:98:
ee:7d:97:5e:0f:50:f1:14:5f:b1:e6:bc:c5:f5:2c:
6a:cd:a6:ec:95:ff:21:e2:3f:87:fd:15:59:b2:8b:
5c:c4:7b:35:43:db:18:56:13:d6:bb:d4:a7:5d:fd:
36:5c:33:85:36:00:76:e3:ca:f8:e2:a4:96:fd:5b:
4f:1a:40:20:a9:78:02:72:53:89:fd:14:f4:07:bb:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:5D:6E:53:23:9E:C6:B6:E1:64:E2:DB:27:4F:39:9D:66:21:12
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:b6:b6:41:a5:83:59:df:e0:7c:b0:3f:69:5d:4b:34:23:
16:29:28:84:50:38:e6:f0:b1:46:6f:4f:df:c0:be:e8:c7:81:
79:6e:11:5e:af:ad:3d:3d:71:72:10:27:18:27:d5:db:68:53:
2f:0f:22:c9:50:43:6c:23:4c:76:76:36:f6:9d:65:24:78:b1:
40:2f:f7:66:3c:1b:cd:b5:5c:01:e3:e0:cd:d9:9c:20:9d:56:
94:8b:36:64:45:34:1c:85:08:24:f1:1c:9c:fd:7d:1d:bb:2c:
ec:2f:e0:a0:31:67:82:5d:7a:0e:09:3e:d1:6c:52:aa:e0:ae:
9e:12:d0:c1:b8:50:6f:92:8d:2c:9d:b7:b6:a9:49:0a:7e:f4:
e7:27:18:39:8c:0a:cd:55:19:8f:98:53:8a:9c:a7:20:35:99:
1b:67:bf:08:d1:7d:d3:f2:3c:fd:f8:b1:4f:5b:f0:84:37:29:
3a:8a:37:17:06:cf:de:ae:a9:8f:e8:0c:10:97:7e:d9:7c:64:
40:78:c6:1e:d1:8d:ee:b7:a5:c2:71:2b:d2:1a:36:8c:43:7e:
be:da:cb:08:f2:70:d7:1e:6d:95:8c:31:95:dc:6a:3b:68:2f:
7f:7b:dd:de:f1:cb:dc:e4:8b:3e:06:c1:88:ac:bc:5c:ee:f8:
a0:8a:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:06 2026 by rpki-client