Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: fdabHWZBl6Y30skXFKLjEv7o7RQ3vuUgfT+9Q1KVqUw=
Subject key identifier: 61:75:7E:0E:0C:9F:9C:7A:DD:2A:19:F2:75:C6:2F:4B:EA:EF:F6:53
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 019E31857302AE73C615A941EF7895704C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 15CB
Signing time: Sat 16 May 2026 16:01:29 +0000
Manifest this update: Sat 16 May 2026 16:01:29 +0000
Manifest next update: Sun 17 May 2026 16:01:29 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: i9Rmpec/k6GPQ/Pcdwgx8tuX1sjC+YSY97WLD+ulk3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:73:02:ae:73:c6:15:a9:41:ef:78:95:70:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: May 16 16:01:29 2026 GMT
Not After : May 17 16:01:29 2026 GMT
Subject: CN=61757e0e0c9f9c7add2a19f275c62f4beaeff653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:48:b6:dd:8f:70:87:f5:14:b4:07:81:21:
2d:13:b3:ea:a6:ea:ce:92:38:9b:a0:c2:02:be:09:
b4:17:af:85:a5:0b:c6:e8:4d:5b:ed:a0:57:b5:35:
11:fa:ec:a7:63:b5:b7:03:1d:7b:e2:fe:ed:d6:5b:
b0:bc:4c:f8:65:4f:01:96:b4:ed:74:bb:75:a9:81:
26:82:92:a6:a4:66:47:74:aa:93:6c:4f:c2:75:08:
5f:b1:44:71:2e:b4:50:ff:39:e9:7f:42:9f:ba:65:
97:25:69:d2:de:eb:2b:fd:80:e8:cd:a0:13:7f:e1:
0d:54:4a:15:30:0c:49:91:77:1a:f9:86:54:e5:a7:
06:4d:17:a4:8b:6f:87:92:0a:61:df:1c:ad:b6:29:
f1:be:53:18:27:63:97:63:1b:d0:2e:38:64:14:09:
18:2f:ca:1f:a6:16:c5:cd:b7:9d:6d:8b:f6:c4:67:
77:64:27:42:cd:aa:19:f9:ee:31:7e:64:e4:9c:2f:
45:1f:d4:d1:7c:28:32:65:43:4d:7b:a8:ca:30:06:
aa:3f:52:60:d9:db:2c:94:1b:47:0b:70:35:fd:ce:
42:6c:66:16:9e:6d:76:4f:b9:31:48:c4:67:33:02:
22:c0:17:74:87:aa:db:44:6e:ec:82:2c:bf:56:d9:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:7E:0E:0C:9F:9C:7A:DD:2A:19:F2:75:C6:2F:4B:EA:EF:F6:53
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:d4:f9:ed:e8:a8:3e:07:4f:0a:45:b5:45:3b:a2:aa:d1:
f1:26:7c:90:23:c9:df:41:30:ab:ff:d0:d6:66:18:19:aa:4a:
9b:19:f9:8f:96:27:96:cd:12:6c:51:9f:b4:8c:cb:1f:c6:ac:
ac:b7:36:50:2a:21:30:a4:7a:bb:28:35:7a:a4:57:b8:db:46:
9d:11:35:32:dd:ab:2e:a6:69:84:c5:e8:7f:3d:6f:8f:75:f5:
69:cc:03:32:b5:3f:4f:67:99:c3:64:4b:0d:cf:9f:41:3a:d5:
c8:03:b0:a0:2f:71:63:d7:03:d3:05:12:c9:3d:b2:73:23:1c:
35:06:61:03:e6:9e:22:de:f5:e2:cf:18:47:c8:ce:16:90:ba:
98:77:28:c9:9a:94:56:ad:f7:24:d7:35:e3:7f:40:e6:4f:1a:
5e:5d:45:3d:a2:fb:a8:34:90:de:cf:de:bf:d8:1b:24:b0:98:
90:36:cc:7a:15:ce:f8:5c:9a:1c:c1:19:24:68:42:4a:72:7b:
6e:cb:6e:0d:1b:94:ce:2e:7f:cf:9e:ac:26:52:78:0d:f3:2d:
2e:ae:21:7b:cc:3c:32:08:4c:be:8b:22:53:65:e4:b7:34:d4:
9c:bd:90:d9:64:63:b6:3f:1f:88:2a:85:07:50:6b:ac:d9:cb:
88:96:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:02 2026 by rpki-client