Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: at4nFSw1swOkaGZSba73yTrMYUCVj9wEHUlbbtlnmz8=
Subject key identifier: 13:F4:4D:BC:6C:D9:AF:14:C7:47:69:F8:8A:E4:3A:58:F4:55:F8:82
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019E314E5626B56FB8F043D384749EDF4481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 15:01:17 +0000
Manifest this update: Sat 16 May 2026 15:01:17 +0000
Manifest next update: Sun 17 May 2026 15:01:17 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: quClCv2eY9pPKLqBJBjS1BZe0dyvTtp5DVsI3JJb1GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:56:26:b5:6f:b8:f0:43:d3:84:74:9e:df:44:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: May 16 15:01:17 2026 GMT
Not After : May 17 15:01:17 2026 GMT
Subject: CN=13f44dbc6cd9af14c74769f88ae43a58f455f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:1f:96:2c:a0:b8:59:90:b6:38:a0:23:df:
4f:8f:04:4d:53:0e:15:35:aa:18:cd:8a:a4:b1:c2:
ae:1a:ae:01:ed:1e:21:86:da:28:1b:43:6c:a6:6c:
05:dc:e2:c4:28:51:c2:11:92:ff:ac:b4:9a:c1:38:
cd:3d:aa:02:4a:f4:a6:10:86:d1:24:54:2f:af:cc:
49:89:1f:08:e6:05:22:1a:62:85:14:12:96:c2:a1:
8f:3c:7f:74:16:2a:3b:fa:7d:29:24:de:f5:da:ea:
ed:1b:89:38:7f:16:fc:2b:a7:38:eb:5a:c7:e5:41:
a0:c6:fa:47:1d:10:b0:9e:67:93:9e:0f:db:06:62:
3b:55:25:fc:f7:3c:2f:c7:f3:c3:6e:35:be:40:0e:
85:54:4f:57:93:14:3d:09:a1:30:f1:d1:9e:40:d4:
1f:54:cf:33:ae:e7:0f:c2:15:7e:c0:c1:4f:2f:ff:
33:71:59:50:1f:2a:71:c8:59:bf:52:23:4f:e4:f1:
17:65:9e:b6:39:64:20:16:07:bb:eb:f6:64:ac:26:
de:94:e2:a2:6b:39:ae:b7:1b:c5:b0:22:f7:84:0c:
67:95:67:23:a8:2a:af:ac:53:3b:f9:1e:2a:5e:ab:
aa:df:97:7c:c8:f2:6c:e0:f9:57:6d:a7:bb:e3:80:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:4D:BC:6C:D9:AF:14:C7:47:69:F8:8A:E4:3A:58:F4:55:F8:82
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:8a:77:da:26:03:11:96:72:c5:93:51:a3:46:15:49:f8:
6f:54:cb:7c:40:b6:36:03:f4:6f:d1:b6:75:5a:d9:77:c4:d9:
e3:c6:11:02:bd:2f:ed:86:67:69:d8:2c:4f:10:13:e2:b2:33:
3e:e3:b4:89:fb:20:37:79:dd:be:94:5a:da:8f:35:af:4e:20:
a8:83:4d:b7:0f:fa:71:6f:f2:40:b8:37:be:38:78:eb:a7:fb:
81:aa:d5:b2:2e:52:e8:6e:6c:54:d9:87:6a:fa:c0:67:9d:f9:
b0:45:99:8a:a8:6d:59:be:b9:63:c0:1d:c3:e3:66:fa:86:84:
8c:41:c2:fa:d9:8c:7d:75:3e:73:bf:83:3f:f2:9e:37:6e:69:
ec:d2:b4:3f:60:96:b8:25:a5:93:dc:fa:78:49:5e:b2:61:79:
f2:17:8b:ff:95:b6:42:c0:23:33:89:9a:1a:80:d1:6c:ae:82:
04:49:76:d0:34:c7:f2:ba:20:28:54:f9:89:f8:02:e4:b7:1d:
ad:7a:2e:75:4b:3a:f8:6a:dc:b6:98:48:7e:59:59:b4:a8:57:
e9:f8:8a:04:87:13:e4:f7:24:e5:2a:2d:6b:9b:b4:1d:a9:76:
09:b6:7d:7c:0f:3f:ba:c3:08:45:4d:ef:d0:8c:86:60:93:ec:
ac:1f:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:41 2026 by rpki-client