Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: 45UnUgyX++/GnlJTIwGyWzbSbXZiVYBmbQtATfEFQ7c=
Subject key identifier: 83:6B:5C:FB:7B:69:08:96:AF:6E:D9:D8:A7:B4:7C:39:99:68:CA:82
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019E30A98DD49BA08A1F2A7EC25CBBA1B607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 1602
Signing time: Sat 16 May 2026 12:01:18 +0000
Manifest this update: Sat 16 May 2026 12:01:18 +0000
Manifest next update: Sun 17 May 2026 12:01:18 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: KjCOZH19d8yL2KW7FXLdltcKtj0s3MlsIIEz4yAyXVE=)
2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:8d:d4:9b:a0:8a:1f:2a:7e:c2:5c:bb:a1:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: May 16 12:01:18 2026 GMT
Not After : May 17 12:01:18 2026 GMT
Subject: CN=836b5cfb7b690896af6ed9d8a7b47c399968ca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:1e:72:e3:b9:93:d4:32:02:89:f8:97:fe:
6e:9f:d5:08:d4:43:cf:17:49:56:d6:b4:fb:46:fc:
59:ab:48:28:31:c7:68:87:aa:5e:41:e1:5b:f8:7e:
3b:6b:33:dc:20:db:db:73:4d:f1:be:dd:29:5d:80:
61:68:f9:09:13:ca:94:8e:a6:7f:79:ae:26:6a:30:
82:e1:8e:91:2b:a1:24:ac:a3:f6:a0:24:69:18:99:
f2:ad:7f:98:66:3e:f3:27:83:de:c2:c4:0a:ff:6a:
42:ed:10:46:e7:58:e8:3c:00:5e:43:0e:b2:4c:fe:
40:ed:a8:85:12:0d:b1:64:9f:15:0c:05:d7:63:cd:
0c:92:d6:ee:81:e5:78:b4:57:0c:83:e4:10:ab:55:
10:2f:9d:ce:bb:40:a9:99:d1:8a:97:63:4d:6a:a1:
0d:b9:74:5d:27:e5:d9:9e:ec:a3:00:bb:8f:a1:90:
8f:99:fa:c2:b1:4f:68:1b:6c:c2:83:48:3c:9c:d7:
7f:ae:e7:47:dd:36:74:67:75:9c:e4:db:72:a1:62:
90:24:50:ac:c8:b6:53:12:4e:48:f0:b7:9f:eb:fd:
d0:f4:20:19:f8:89:8b:47:f1:d9:f1:f3:55:32:18:
dc:25:6a:c8:b5:bb:bf:1b:3b:a6:9d:69:64:b4:4b:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:5C:FB:7B:69:08:96:AF:6E:D9:D8:A7:B4:7C:39:99:68:CA:82
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:95:44:7e:31:cf:74:99:1c:22:b3:29:65:be:57:c2:67:
82:0d:8f:46:e1:68:4c:7b:1f:c0:d4:1a:47:9f:5b:1f:18:5b:
a9:b8:d6:3a:82:a5:90:a1:49:77:16:bc:78:eb:d9:cc:cd:73:
28:99:17:b8:47:82:ae:dc:91:56:f5:2d:77:89:67:2f:e3:31:
3d:39:4b:2e:ab:98:04:0a:56:54:a3:d7:23:d9:94:00:c7:6f:
35:7f:f7:50:4c:92:d4:2d:d8:9e:1d:b2:bc:47:9a:df:1d:4e:
5e:1d:00:ee:f6:45:18:f1:a6:84:75:87:1c:be:f7:6e:d6:92:
36:5a:64:be:36:ad:20:86:47:61:75:a6:fc:e1:2a:15:c6:ca:
63:18:36:24:af:15:49:6c:41:1f:21:5c:cc:4f:de:10:30:5b:
a4:4e:2d:9e:8d:fa:e2:0c:79:50:8f:c7:2d:fc:29:21:ac:71:
40:4c:90:cf:61:05:2f:a8:3f:cc:4c:02:8d:88:a9:21:98:c3:
5c:ce:ae:3f:3e:af:e8:3e:bf:48:b6:98:09:0f:78:fd:87:56:
a9:ab:31:2c:09:c8:f2:ca:03:08:a2:5e:60:4f:3b:1c:93:71:
27:d5:8b:2c:db:55:bf:fa:f8:8c:aa:9a:c5:1d:b3:54:1d:1e:
6a:f2:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:59 2026 by rpki-client