Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: k21njtWrVnS8w4JfWHc8fftvDZCEZ2J22s4AP8O4T+s=
Subject key identifier: B0:0C:F2:9D:8B:C3:D4:9E:54:96:A8:54:5A:C2:E0:67:A1:5C:25:E8
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019E2FCD4424B68376E6C5E3CFE891802922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1558
Signing time: Sat 16 May 2026 08:00:41 +0000
Manifest this update: Sat 16 May 2026 08:00:41 +0000
Manifest next update: Sun 17 May 2026 08:00:41 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: xX8to/aicAcJ31AmxSasgCVPFqF1+rHz9bJrP3CMHFM=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:44:24:b6:83:76:e6:c5:e3:cf:e8:91:80:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: May 16 08:00:41 2026 GMT
Not After : May 17 08:00:41 2026 GMT
Subject: CN=b00cf29d8bc3d49e5496a8545ac2e067a15c25e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:fa:d2:dc:a7:af:d4:7d:49:42:93:7d:cb:
a4:05:76:aa:2e:89:b9:e2:45:d2:cf:fa:5c:d3:e0:
07:f9:5a:d2:f2:6b:0b:e6:82:8e:b1:4f:a2:0c:29:
52:d9:fb:66:40:b1:19:ac:3d:0f:de:7d:70:76:5a:
0c:6a:cb:47:da:00:15:4f:95:a6:ae:e6:59:8b:cf:
65:07:68:70:e6:dd:2c:dd:2f:88:92:14:86:e7:71:
9b:95:be:f9:e2:37:94:29:36:e7:e0:c0:10:98:87:
c5:ee:e8:af:0c:69:19:87:f9:82:98:26:37:95:aa:
7d:5b:c7:1f:c1:9b:29:1e:79:9e:5e:75:24:51:12:
5b:02:a7:38:f1:22:0b:e0:82:22:e8:2b:5b:e6:e5:
d2:23:5d:1e:b9:5b:e6:1f:ba:07:4f:44:51:f2:be:
23:4a:b9:29:4b:52:50:86:1e:c8:4f:26:da:e6:05:
66:04:c4:d7:0b:47:95:c1:41:69:f3:28:37:e5:4c:
c8:24:a8:cb:36:5d:8e:fe:b6:ba:4a:39:04:b9:c1:
e2:23:2f:29:b3:59:c2:96:45:09:d2:75:b9:80:eb:
8a:d4:aa:c6:c5:bc:a9:5f:34:0d:00:06:09:f9:2a:
fd:7f:c5:c5:77:2c:15:e0:5f:f4:d1:28:06:c6:cc:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:F2:9D:8B:C3:D4:9E:54:96:A8:54:5A:C2:E0:67:A1:5C:25:E8
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:6e:80:72:05:3d:17:cb:62:46:e6:d9:c7:46:c4:e2:2e:
e6:34:8c:e0:65:51:8a:0b:3f:1a:a3:ed:9d:65:b1:6b:60:d1:
d9:dd:c2:54:06:de:72:db:9e:ee:4c:7b:a3:49:c5:5d:5a:14:
80:25:67:c0:42:eb:f0:7b:02:be:2f:06:78:83:b5:e6:23:9b:
1f:c0:09:b3:06:09:ab:e7:e2:65:8c:8f:78:aa:14:af:02:6a:
40:48:3e:0e:37:31:45:3e:b0:24:44:26:cd:44:3f:54:3a:84:
24:da:03:39:f0:ed:31:28:77:4b:47:1f:a0:5e:c8:e4:30:b2:
24:67:29:54:4e:44:1d:a5:46:e5:b5:9b:ed:82:e4:6a:b6:c6:
3a:19:b2:ef:f5:8f:29:54:65:99:4a:b6:04:78:08:94:fe:03:
31:67:1e:a7:c7:9a:be:f3:cc:28:de:f1:81:c1:59:46:4b:17:
1e:cc:f5:0d:c2:1e:42:5d:0a:64:f3:03:86:fe:5b:f7:06:15:
90:a8:ce:40:8b:eb:ff:d6:88:a4:eb:f1:5e:54:9c:6b:75:79:
cd:34:f7:bd:14:6d:6b:1e:a9:39:76:cc:66:a5:fb:6a:39:b4:
71:19:37:ec:d6:e9:b3:79:1f:83:8b:e8:9e:33:b6:af:31:f6:
5f:2f:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:20 2026 by rpki-client