Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: 6UfC313SMzM2BFo589+BihdJDgmrHlq5yIlsVpXXbj4=
Subject key identifier: 8B:13:29:DF:95:69:B3:D1:0C:57:68:98:33:32:8D:5A:02:7E:B6:E5
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019DF98410041DCBD97731CBB7963EB9BABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0F8B
Signing time: Tue 05 May 2026 19:01:14 +0000
Manifest this update: Tue 05 May 2026 19:01:14 +0000
Manifest next update: Wed 06 May 2026 19:01:14 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: MRAZn2E+MFjyOQx7w8f7JXxLcbbQ/G4FDGQ6AQ64G0U=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:84:10:04:1d:cb:d9:77:31:cb:b7:96:3e:b9:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: May 5 19:01:14 2026 GMT
Not After : May 6 19:01:14 2026 GMT
Subject: CN=8b1329df9569b3d10c57689833328d5a027eb6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:74:50:27:1a:33:64:47:27:e4:f3:3f:3a:
21:7d:15:6a:ca:41:d8:80:ad:76:21:71:19:56:82:
a8:28:b3:19:fb:69:02:87:a3:e5:9f:4a:2a:8d:78:
54:32:7b:c3:e7:c7:7f:78:34:fb:0f:9d:a3:93:f5:
44:1b:79:2b:5a:63:11:fa:b1:27:3d:02:da:50:82:
f7:98:7c:df:43:85:ac:d2:de:e5:6c:61:73:64:47:
33:84:73:f0:5c:31:28:05:a6:e0:1b:aa:89:e8:b6:
39:68:a2:0b:1f:78:7c:ee:28:5d:70:a1:26:fd:29:
bf:5e:9f:d7:59:8f:58:d0:f6:25:4c:e2:03:4e:63:
58:37:b4:7b:15:e1:63:cf:3a:b2:e8:48:59:5f:06:
4e:dd:b4:64:e7:94:b9:93:f7:e0:23:58:2d:6f:e8:
fb:41:f2:0f:05:08:1a:38:c7:de:8f:da:3e:c8:d3:
be:07:1e:85:d6:99:1f:dd:09:cb:7f:1e:e9:3a:87:
42:15:1a:28:05:30:40:bc:84:63:c2:25:25:22:ec:
58:d7:91:c7:6b:59:8f:17:d5:39:4b:77:66:7c:5f:
bd:bf:44:e6:3e:9a:b5:26:99:63:43:e0:41:4d:15:
6c:3d:5a:5a:28:77:8f:18:f1:e5:d9:0e:22:5f:3e:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:13:29:DF:95:69:B3:D1:0C:57:68:98:33:32:8D:5A:02:7E:B6:E5
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:42:1b:0c:1b:79:62:53:0b:a2:8f:aa:fc:53:43:d7:3e:86:
bf:e0:1c:98:e3:49:81:f5:b2:f1:5a:f4:f5:cb:07:37:38:36:
d1:29:82:1f:48:f3:88:34:71:80:6b:f9:33:f9:53:7a:b6:4b:
83:fb:ba:85:e2:21:41:ef:9e:74:f0:1a:70:08:d9:ef:fe:23:
0d:43:72:f5:06:85:40:ad:51:94:e9:0f:9e:67:97:d9:62:31:
aa:e2:81:d1:93:7b:dd:0d:dc:99:0b:2c:a0:ab:3a:b2:17:f2:
88:c9:ca:20:6b:11:68:a8:c5:11:c9:a4:68:20:83:8e:49:46:
63:97:0d:6f:9e:b8:d5:1f:7f:be:14:81:e4:63:8b:2b:81:55:
dd:4b:79:94:3e:ce:7d:38:72:cb:2f:0a:8e:2d:3f:60:da:32:
d1:ff:d7:0b:c6:ef:de:f0:03:b9:ec:f7:38:d0:47:3c:6d:da:
b2:07:90:d9:76:28:29:c4:d5:09:9a:16:74:0d:37:20:00:22:
dd:31:2d:57:2b:91:7c:05:d4:40:52:ce:64:16:0d:59:25:2e:
c7:bc:06:7d:66:f7:c2:a1:bf:68:cc:5e:30:21:39:6f:ad:97:
28:52:23:01:d2:1a:c7:a0:df:8e:3c:e4:6d:7c:a7:2f:93:d2:
c0:60:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:51 2026 by rpki-client