Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: ZdWWWBVpr9OAnqL64eX7gYSDrYb+QivNHJX3x++S8JI=
Subject key identifier: 18:A3:A9:4B:3F:CB:B4:8D:F0:3B:06:9F:4D:B9:0A:9F:FF:79:C4:1A
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019E2AA6F34CA6A9F1B7C8D5A98E7E488B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 141F
Signing time: Fri 15 May 2026 08:00:44 +0000
Manifest this update: Fri 15 May 2026 08:00:44 +0000
Manifest next update: Sat 16 May 2026 08:00:44 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: E4fDzjhnND9dSQcwVir9iokbdehoUQVdy7EdRUhXTFk=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a6:f3:4c:a6:a9:f1:b7:c8:d5:a9:8e:7e:48:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: May 15 08:00:44 2026 GMT
Not After : May 16 08:00:44 2026 GMT
Subject: CN=18a3a94b3fcbb48df03b069f4db90a9fff79c41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:88:7d:7d:c7:22:00:cc:9e:0e:5f:fb:bf:
b3:73:3b:52:11:56:8b:21:19:cd:93:72:47:70:5c:
4b:df:0e:c3:2c:eb:2a:fc:d5:c0:0d:a8:53:d8:f5:
9f:56:56:f9:17:a2:9e:e3:a4:15:19:1e:b7:ff:a9:
d3:09:2c:0e:19:e2:67:80:04:9c:ea:0c:98:fc:30:
41:ff:92:bf:1e:0f:01:ec:32:67:2b:f7:42:7d:e3:
8a:27:b0:94:d6:6c:58:82:3f:42:d5:b7:bb:90:0a:
4f:64:65:f4:29:51:aa:ae:ac:29:af:03:95:af:5a:
59:e5:b9:4f:48:58:e0:1c:a0:31:ea:3f:16:96:86:
6b:47:39:34:d6:95:f0:02:b2:0e:f1:cb:e9:e1:f3:
3b:e3:65:f5:b4:8e:1f:69:96:c7:62:86:27:4f:67:
f6:2d:55:2c:f3:75:66:e8:08:83:ec:e6:44:e4:aa:
da:c4:53:64:a7:9c:64:01:96:4f:8b:28:8d:20:2e:
b0:e7:9f:9f:aa:f1:1a:e8:5d:79:18:00:93:e4:f4:
5b:45:58:15:61:1e:4d:ba:e2:af:a7:b4:b9:b5:68:
60:e4:9f:54:d4:36:10:fb:60:a8:16:52:ab:3a:54:
c2:70:51:e8:b2:b3:71:b7:da:b9:12:cc:38:5a:0f:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:A9:4B:3F:CB:B4:8D:F0:3B:06:9F:4D:B9:0A:9F:FF:79:C4:1A
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:e4:ae:af:78:aa:2e:4f:7c:bd:3b:4c:b2:b7:ec:68:f5:
20:14:e6:f4:c0:0c:5f:50:3a:36:00:1a:bf:f9:2f:af:3a:bf:
f7:7f:7d:d3:db:c4:9a:02:77:58:18:c3:b2:e9:fa:af:4e:2a:
8f:18:95:96:8a:01:86:77:5a:f5:71:c1:0d:d8:76:0f:52:11:
64:be:40:6d:1a:d6:df:91:6e:49:4e:a4:e9:6a:19:3b:cb:b1:
88:50:c7:70:93:57:f8:16:1a:82:db:2b:de:10:17:82:5f:f6:
71:ee:25:8f:17:25:5e:54:5c:cb:59:34:09:d2:41:1f:bc:13:
f9:65:ab:6c:f4:7f:53:40:1c:e8:e8:28:35:b1:cf:ef:36:c6:
68:bf:67:11:de:81:e7:1c:e6:4a:5f:cb:5a:92:8d:69:3d:44:
13:61:15:2d:5c:05:e6:72:7d:04:49:5b:df:38:2d:57:cd:74:
c4:46:9b:be:19:30:ad:20:bd:e2:73:4b:d2:42:a2:c2:93:4f:
c8:2c:bb:5c:43:72:5b:64:71:94:8f:e4:3e:fa:25:87:0e:d2:
9e:e6:80:11:0e:4d:b8:82:6c:34:31:3b:a9:f9:b9:49:ab:6a:
54:94:b2:1d:95:48:aa:97:82:c3:fa:1e:cb:c9:50:f9:62:ae:
eb:8c:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:36:10 2026 by rpki-client