Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: aQM+5fKB3hrb1oSvE260Wj/Ry+VbYt0h5fBKTdQzTjY=
Subject key identifier: DD:FB:51:3C:7F:4F:FC:78:87:7D:EE:00:57:3D:DB:0D:67:FB:32:6E
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 019E30A995D65F6E6E74ED7C41CE994F732B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 0669
Signing time: Sat 16 May 2026 12:01:20 +0000
Manifest this update: Sat 16 May 2026 12:01:20 +0000
Manifest next update: Sun 17 May 2026 12:01:20 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: 7Jfcvd6O1m7M+j+Kds3HQytnWCnaZKgGBxjROrHXU78=)
2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:95:d6:5f:6e:6e:74:ed:7c:41:ce:99:4f:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: May 16 12:01:20 2026 GMT
Not After : May 17 12:01:20 2026 GMT
Subject: CN=ddfb513c7f4ffc78877dee00573ddb0d67fb326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:c2:df:1a:1d:5d:83:d9:b4:c8:8e:81:65:
37:11:e1:94:5e:c8:d0:de:b6:d6:02:c3:3b:35:20:
be:8e:af:98:6b:a9:d6:56:6b:5f:f6:2e:97:a2:fe:
40:d3:97:a6:6e:d7:12:74:e7:70:56:78:26:f3:f5:
dd:27:66:90:fc:23:4c:5d:d4:5b:38:be:00:32:ee:
9a:9c:38:b6:02:9e:11:b4:34:09:21:25:e5:30:1a:
f7:68:9f:35:25:c2:5c:0f:0e:33:39:6c:33:98:3c:
bf:e6:fc:72:a8:80:12:ab:8e:bf:97:cf:2e:81:31:
b5:f7:d8:83:fc:35:f4:a1:45:4d:50:1e:27:4e:e7:
a0:34:ec:75:1c:9f:9f:41:61:55:65:77:4e:6a:3f:
b9:5d:cb:64:9f:b3:ec:3f:d1:6e:b1:03:94:a7:a5:
7a:35:3e:19:b2:9f:3e:bc:28:b5:8e:09:7f:32:f5:
24:d0:0a:1b:dc:0e:5a:e2:6e:27:34:69:a5:9f:91:
ac:f4:d1:3e:9d:b1:44:7b:43:8d:56:0d:bb:6f:d7:
dc:5c:62:f9:f6:9b:f6:5f:39:ff:f9:c9:f4:13:8c:
52:f4:ed:3a:c7:84:76:c3:bc:b0:23:f8:e1:17:77:
82:3e:8a:f8:b4:a0:84:89:72:9c:70:e4:9c:a3:ca:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:51:3C:7F:4F:FC:78:87:7D:EE:00:57:3D:DB:0D:67:FB:32:6E
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:24:b9:cc:94:fb:90:31:f1:8e:4f:82:a8:32:1b:3b:d3:4b:
a4:49:20:5c:40:45:78:b7:4b:21:e8:95:52:a1:8b:5a:5e:68:
b9:46:5d:af:fd:e2:b0:ce:4b:15:2b:b0:57:d9:9d:43:bc:9c:
ca:f2:d7:d2:9e:af:ee:11:bc:f6:d8:86:e2:df:6b:64:74:e3:
63:28:fb:de:35:bb:14:83:63:c5:1e:79:76:57:37:b0:49:72:
e7:71:99:7a:be:44:6b:c1:8f:14:73:29:09:75:17:f0:00:2a:
31:33:02:28:f5:47:67:13:d2:82:a0:1f:cb:a0:25:d4:79:2e:
37:8f:09:48:a0:c0:9c:6c:cb:a6:f7:9a:b8:d1:b2:cb:8c:0d:
47:f0:3f:13:9d:dc:ec:36:25:eb:80:e3:8f:da:9a:c2:6f:db:
76:ab:3b:d4:69:a4:01:be:ae:f7:dc:07:21:95:2c:9b:41:8b:
d9:90:e9:3a:9e:de:3b:90:03:da:f2:66:76:9c:dc:be:43:8e:
e4:f2:c2:a6:86:48:28:12:b3:25:00:f2:e4:dc:b6:e1:44:1a:
7b:77:dc:8d:4a:06:cd:cd:eb:87:50:64:e2:66:82:e3:67:1a:
63:da:f7:09:19:d8:0d:e3:91:98:ad:1b:6b:40:16:9a:28:5a:
80:0b:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:21 2026 by rpki-client