Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: 8DuB75A7xQvBXM7D6aNvA6Q9R5yiIt2egTIWuKAGGJ0=
Subject key identifier: 43:1E:D1:05:57:F3:1B:1C:61:D4:C4:F5:DB:CA:55:CB:05:A9:5D:AC
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 019E30A95F870809EEB8416998557E6F25C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 1197
Signing time: Sat 16 May 2026 12:01:06 +0000
Manifest this update: Sat 16 May 2026 12:01:06 +0000
Manifest next update: Sun 17 May 2026 12:01:06 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: J59lBdDoJwDYosTmBboYdHDCQQhYF0Y62+/uHKvcJWM=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:5f:87:08:09:ee:b8:41:69:98:55:7e:6f:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: May 16 12:01:06 2026 GMT
Not After : May 17 12:01:06 2026 GMT
Subject: CN=431ed10557f31b1c61d4c4f5dbca55cb05a95dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:d7:08:45:c9:cb:f7:22:7f:85:ca:b2:bc:
4e:f3:73:2c:33:0e:c7:a4:df:cd:1b:31:0e:7e:08:
ad:9a:b4:f7:3f:27:f0:17:af:b6:c1:d5:ed:33:8e:
bf:11:6f:5f:f8:6c:cf:12:d5:7e:78:bc:9a:96:93:
42:03:1e:48:a2:75:fd:a5:92:a4:2e:03:8d:91:db:
41:c0:b3:b0:3e:71:35:ad:25:af:04:94:49:74:d2:
4d:38:11:ac:6f:5a:d1:14:2c:62:bb:ce:3a:2e:3a:
22:ce:90:f9:2d:8e:f5:55:49:98:48:4c:65:7f:87:
c8:f8:a6:84:55:41:5a:df:36:14:96:c6:17:8e:19:
4d:32:5f:05:11:53:39:7b:65:23:c9:e5:45:97:81:
2c:ec:a4:9c:01:ff:08:4b:09:18:9f:51:a6:79:c9:
1d:fd:b2:7f:e2:07:de:80:d2:67:f1:05:5d:94:c4:
c4:da:b9:30:0f:a7:78:28:48:27:19:74:95:bd:d3:
90:b7:c9:9f:19:96:0b:dd:e1:e2:a9:71:8c:83:5b:
13:f7:fd:ed:3d:7c:52:b7:61:d6:bc:2a:be:fd:fe:
ed:2d:6b:ec:4d:e6:7e:c1:6b:0c:52:0a:54:25:e1:
98:84:10:e9:03:09:fa:78:cb:fe:f8:50:aa:ea:2a:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:D1:05:57:F3:1B:1C:61:D4:C4:F5:DB:CA:55:CB:05:A9:5D:AC
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6d:ee:df:c8:ab:6f:08:eb:3a:4d:a5:22:09:d3:9e:20:55:
c2:a6:24:30:a2:c1:75:99:e9:ba:e0:50:21:54:79:c5:0a:8f:
ee:93:83:6b:61:c3:74:1f:32:fe:1e:49:f3:a6:7e:80:73:4c:
df:87:78:39:19:06:bf:dd:5a:96:3f:7c:3e:68:ca:bb:ef:93:
a2:92:8d:48:8d:13:87:61:cf:a4:1c:ca:5c:8c:b9:bf:21:c5:
5a:1f:b9:8a:a0:f0:2f:24:9e:22:39:5f:3c:49:f9:63:4e:7e:
9a:ce:02:44:2f:ac:b7:73:fb:cd:f5:93:9b:a8:6a:ec:78:e8:
b8:98:d5:72:b6:3c:5b:20:8f:c1:f5:fa:02:59:29:87:0e:8b:
a3:ac:6a:7e:1b:c2:b8:18:50:06:95:69:0e:3e:a0:bd:38:1a:
c6:f6:fb:36:a4:2c:68:c5:91:0d:94:6e:3c:df:3b:45:83:bb:
b0:14:a0:f7:d0:48:91:fb:d1:2e:dd:6a:2c:ad:7b:dc:ff:f0:
b0:ff:63:6a:c6:9b:b7:fe:00:5d:38:31:ad:ff:f5:02:73:04:
56:d5:91:78:ff:f4:23:e3:47:dd:6d:a2:ad:d9:0d:f7:d8:6e:
9b:ef:f0:b8:14:e9:5d:a8:8d:a7:23:d4:bd:a8:fd:f2:bf:51:
ea:6c:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:58 2026 by rpki-client