Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: FKdx4QjwCRDVjB6A2ZVd70SHk4C/1QDj5ADidKST8aY=
Subject key identifier: 69:66:B0:D4:DF:24:F3:57:A5:8F:BB:F2:1E:EE:BE:C2:76:32:2A:5A
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019E3117920BB845D750F8C683869C540939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 14:01:28 +0000
Manifest this update: Sat 16 May 2026 14:01:28 +0000
Manifest next update: Sun 17 May 2026 14:01:28 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: Lhaj5W10YEg+r/4whuJtRsSOgCBdFZfx+znGVXF1D5w=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:92:0b:b8:45:d7:50:f8:c6:83:86:9c:54:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: May 16 14:01:28 2026 GMT
Not After : May 17 14:01:28 2026 GMT
Subject: CN=6966b0d4df24f357a58fbbf21eeebec276322a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:2e:1c:48:a6:be:c1:1c:49:07:4a:a3:c1:
94:a1:0c:8f:15:58:0b:f1:09:cf:74:c7:8d:13:5f:
8a:d7:af:ac:28:87:c3:74:26:e1:ee:53:86:2d:b0:
79:71:c1:f3:d7:25:99:f9:bc:fc:e5:cd:05:5e:38:
58:42:14:e9:bb:f6:ef:0d:73:01:15:8a:aa:ce:aa:
96:5b:32:b3:67:1a:03:11:41:a1:a9:aa:32:3d:93:
98:da:30:20:99:81:f0:90:b7:ef:d7:30:cb:e1:9d:
2a:fb:43:aa:1e:99:7e:1e:9b:12:28:8e:ef:85:d0:
05:00:33:39:e7:4c:80:b1:51:ee:5a:51:32:d7:0c:
9f:66:07:e0:28:64:bc:47:ea:45:a9:00:3c:06:10:
42:14:96:ca:c7:2d:41:ef:5a:67:c5:d9:a5:ff:63:
45:00:de:4f:e7:ea:dd:28:9a:9b:99:f4:42:91:5c:
7c:4c:0c:56:90:4c:99:8e:ec:42:c6:b9:8a:48:20:
29:2b:7a:38:3c:6d:66:59:e5:dc:f9:5a:c3:dd:ec:
61:6f:d7:89:98:e4:d6:b2:8f:7f:c1:c6:5f:19:cd:
e0:24:98:f0:0a:d0:ed:ee:4b:b3:09:ce:02:25:1b:
86:fc:d7:6c:f3:b7:a8:88:8f:4f:1f:e1:17:f6:6e:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:B0:D4:DF:24:F3:57:A5:8F:BB:F2:1E:EE:BE:C2:76:32:2A:5A
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:2b:ef:33:22:a1:fe:77:00:2d:02:74:a5:07:1e:f1:e7:
23:57:c1:0e:af:bb:b1:d5:7c:ff:fa:78:3f:b5:f5:4b:d3:a3:
ac:23:b1:f2:d5:58:93:c6:64:82:57:42:ac:05:87:8a:9a:09:
a0:7b:3f:0b:ed:07:59:74:82:92:72:7f:5f:e0:55:ca:96:d5:
71:e3:5e:aa:2e:40:91:73:f1:fc:91:ce:f0:01:68:32:12:79:
73:42:e7:3f:f2:e2:a3:82:b5:62:ec:a7:22:49:a2:9d:6d:86:
44:d4:c2:14:00:cf:39:01:aa:47:38:8d:3f:77:14:41:3e:73:
3b:d6:87:aa:a2:75:d6:97:89:b6:15:e6:97:7c:55:94:da:5d:
5b:00:f0:b1:92:7b:9a:3e:cf:4d:af:d4:69:48:56:d7:49:bf:
c8:4d:14:de:60:a4:b1:18:7e:44:ff:bd:2e:0b:cb:bb:c4:68:
b4:c8:01:eb:6a:46:42:c8:36:b0:75:6c:a8:b9:f1:81:82:2d:
2b:8b:07:59:7f:a0:33:9a:76:8c:99:f9:3f:3c:eb:72:27:65:
b1:8d:f2:52:9b:a1:9d:31:00:ae:6a:2f:34:2d:71:68:e0:b7:
25:fe:fc:60:d4:e0:91:8f:82:49:1b:5c:0d:58:1a:84:72:c0:
92:af:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client