Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: 14NmH1Ka/Gii8TX44M1R8/I2K/CzbhcMCwUShQqk7ho=
Subject key identifier: 8D:AC:40:C3:9C:A1:85:62:B8:93:E7:EA:5F:9A:13:65:F1:26:0B:04
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019E2F60191A2814B1C29D4FD46C7B7677EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 06:01:27 +0000
Manifest this update: Sat 16 May 2026 06:01:27 +0000
Manifest next update: Sun 17 May 2026 06:01:27 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: R1TwsONMCTvMATolyfuVA9UwLu8IT2hR9K+ZLj3XJTA=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:19:1a:28:14:b1:c2:9d:4f:d4:6c:7b:76:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: May 16 06:01:27 2026 GMT
Not After : May 17 06:01:27 2026 GMT
Subject: CN=8dac40c39ca18562b893e7ea5f9a1365f1260b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:e8:7a:0f:78:4a:fc:6a:6b:d4:69:c3:53:
a5:ae:bd:5f:10:5b:7f:40:8c:3c:19:55:a6:f5:28:
d6:80:62:69:ab:73:15:18:bd:89:03:f0:4d:b5:93:
17:19:21:c4:ec:8b:9a:9b:ec:40:f3:29:cc:0d:91:
d6:f6:a0:90:8c:35:87:bc:de:38:ba:7c:89:4f:a4:
94:f5:21:92:2a:2d:cc:53:1b:46:a1:13:47:8c:41:
6b:3e:37:9d:c9:c0:cb:31:ff:7c:74:6d:78:1b:a6:
36:7d:4e:f0:ac:cc:17:34:94:79:74:c5:18:bf:eb:
0c:fb:85:06:c7:0a:83:48:21:12:16:b3:76:62:3a:
7a:a6:54:73:1e:fd:f8:24:b4:94:7d:58:73:32:32:
fd:49:04:77:67:c0:21:81:53:1c:39:4e:8d:f2:8b:
c0:fe:a9:33:1f:8c:1e:40:12:32:ce:f0:39:d3:48:
df:73:36:e4:5a:29:9c:8c:39:93:cc:f9:22:53:b1:
f6:86:f7:48:98:0c:2b:47:17:40:77:2b:e5:62:19:
b0:21:59:b0:05:07:19:a4:34:6b:69:b8:c2:94:13:
69:03:6d:2b:c0:3d:8d:67:54:88:67:51:90:47:3b:
fb:b2:21:9d:33:1e:3a:a6:e0:98:e0:69:e5:23:86:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:40:C3:9C:A1:85:62:B8:93:E7:EA:5F:9A:13:65:F1:26:0B:04
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e1:71:05:b1:f0:ba:04:15:dd:2d:51:91:34:62:24:a6:c2:
0d:d5:56:b2:cc:c2:e9:b2:5e:18:82:a9:b7:f9:46:ff:4b:dd:
c4:36:c4:55:23:91:1c:63:de:66:10:87:66:1c:e9:8d:ba:a2:
6d:f7:3d:30:fb:f4:f9:20:e8:0e:98:aa:d8:55:c8:35:67:16:
7f:23:a3:1d:2b:98:3b:b1:3c:9a:e0:01:b3:2d:7e:93:87:20:
75:56:60:b1:42:ac:25:bb:a7:36:38:9e:73:fb:eb:e9:63:5d:
c9:9a:64:7e:e5:67:6e:9b:fb:92:18:c4:88:e7:23:7e:25:46:
bf:2a:f2:5f:b8:cd:c7:a8:b5:c2:1f:81:e3:6a:44:a4:45:f4:
4c:b5:d4:84:a2:ba:2b:c7:0f:7a:a5:2f:99:59:74:99:6a:22:
2b:50:65:49:7f:44:5c:d2:7a:39:3e:8a:9e:40:6d:99:a3:ec:
2c:52:73:0e:96:aa:bb:9b:a2:c5:59:0b:4c:1a:f6:bc:08:93:
a8:68:4c:ac:fd:4f:8a:63:f2:0a:d1:06:d3:be:4b:84:06:70:
69:95:63:ba:03:48:bc:af:96:2f:25:6b:8a:21:8c:ba:56:06:
b5:34:91:e5:1a:15:1c:c2:bf:0f:7a:d5:17:51:83:83:fc:71:
9a:5d:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:19 2026 by rpki-client