Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: 4hcrjgQvWL41xWssNdfLTQnzhIgmYODLnHYv5MShnS8=
Subject key identifier: A7:13:E5:D1:6F:E6:A5:64:F8:82:AF:D3:8B:BF:92:03:A6:FA:DC:10
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 019E3004F4D929B6C636139FA08E8BF16CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 13AB
Signing time: Sat 16 May 2026 09:01:31 +0000
Manifest this update: Sat 16 May 2026 09:01:31 +0000
Manifest next update: Sun 17 May 2026 09:01:31 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: 2Y/ZZUidH+m0Ikm5Jv6gd5ZQhCx09H5RTMEO38ZOYRc=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f4:d9:29:b6:c6:36:13:9f:a0:8e:8b:f1:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: May 16 09:01:31 2026 GMT
Not After : May 17 09:01:31 2026 GMT
Subject: CN=a713e5d16fe6a564f882afd38bbf9203a6fadc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:48:b4:e9:12:5f:3f:e3:90:ab:7f:d3:e7:
c1:28:b4:6d:c2:97:33:7a:9a:96:23:a7:43:1b:20:
a0:b1:3d:a2:39:fb:66:ff:f9:06:57:80:80:ac:df:
8d:b9:18:bc:08:c9:48:a8:53:13:6c:54:fd:86:f0:
07:45:ac:2b:2c:72:7e:d2:56:f3:46:ff:ef:99:39:
42:bb:e7:cb:99:d1:b9:7a:17:cc:89:fd:93:8f:35:
24:17:8c:93:db:32:38:13:d9:80:a3:52:e2:30:14:
c7:9f:d5:56:12:1f:6c:06:fa:62:2e:c0:88:31:be:
33:f6:7e:34:0b:4a:e4:5a:99:b6:7e:88:03:c5:be:
98:11:09:77:a7:c4:ff:56:9b:5c:76:f7:38:85:63:
56:38:9b:88:b3:f0:82:0f:45:b3:4d:37:2a:de:52:
d4:96:35:c0:bd:8b:54:50:4d:8a:ea:92:3e:58:42:
08:58:46:be:6d:3f:54:f3:53:b4:be:3a:ba:ba:ea:
ee:77:cb:33:91:d2:ba:4d:91:b4:23:e5:ec:f5:a9:
80:89:70:2a:6f:c9:77:67:a8:e0:47:03:86:2c:f3:
eb:1f:ce:e3:69:ae:9b:39:3a:d2:87:de:48:d6:c2:
6a:45:f4:d6:8e:02:57:3b:a6:7e:09:65:f2:9e:2c:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:E5:D1:6F:E6:A5:64:F8:82:AF:D3:8B:BF:92:03:A6:FA:DC:10
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:92:a3:2a:b2:6d:0a:2c:80:f5:12:e4:d2:0a:08:40:bd:
e1:77:87:47:ce:43:71:6c:78:68:5c:ac:ea:e5:a9:8d:29:26:
b1:a4:c6:65:0e:0f:9d:46:b6:43:74:49:ec:3c:51:33:8f:cb:
66:5e:48:58:d5:e9:20:b8:05:3e:8a:68:75:e8:50:88:55:2c:
7e:11:39:1f:44:3d:30:e0:c7:73:00:fe:98:b4:e3:94:7e:6e:
65:5a:34:18:e5:eb:29:8f:cf:dc:dd:6b:d3:97:ed:39:2a:11:
05:df:50:2a:3e:c5:f0:24:8d:58:83:74:70:87:12:49:d7:39:
a9:ec:fe:7a:c9:2e:95:2f:13:bd:80:f2:ae:99:1f:68:57:18:
77:2c:3b:d9:a9:5e:b1:e3:79:c2:43:6c:0c:46:4e:fc:ec:4c:
0d:75:14:3b:ab:0e:14:54:88:6b:e1:6e:2b:19:7e:f9:72:62:
90:58:c2:15:bb:e7:7c:8b:6a:4f:68:ef:f7:f8:b1:aa:fe:63:
f1:02:d1:21:de:5e:51:04:86:42:f5:b1:23:e7:05:ac:cb:e9:
9d:6a:c2:29:88:95:c6:a5:90:b6:a1:83:f0:5d:6f:4a:69:9d:
3e:bb:e0:e0:6a:9c:06:2f:93:ec:66:b7:ab:e1:dd:11:29:b7:
18:3c:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:32 2026 by rpki-client