Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: o0xkSQvOeHi7G4YOdkeS6u7b2LSx4NUw674BLmP9nuk=
Subject key identifier: 2C:50:6D:0C:5A:C7:62:72:E1:17:EE:8F:33:B2:42:F9:EC:10:87:72
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 019E300507C64A12A42B9AE782C6343646B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 1072
Signing time: Sat 16 May 2026 09:01:36 +0000
Manifest this update: Sat 16 May 2026 09:01:36 +0000
Manifest next update: Sun 17 May 2026 09:01:36 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: 9TQevFVhi0JjwMA40MUwG6VhgGJXBNeZQ7kl/fn27O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:07:c6:4a:12:a4:2b:9a:e7:82:c6:34:36:46:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: May 16 09:01:36 2026 GMT
Not After : May 17 09:01:36 2026 GMT
Subject: CN=2c506d0c5ac76272e117ee8f33b242f9ec108772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:f7:a0:cf:11:9c:58:a9:9a:87:8d:b5:a9:
8b:73:f0:47:89:52:c6:f7:a0:17:67:6e:2e:00:09:
6f:48:97:c2:57:70:6e:2c:5e:88:44:b7:b2:f8:33:
5b:48:88:2e:9d:93:87:fd:40:c3:5a:9e:68:0b:9d:
da:80:d9:53:ac:74:d0:75:aa:e2:ba:bb:0c:e7:6e:
15:42:0b:9d:8b:0f:34:00:51:43:cf:d1:c4:73:dc:
f0:0e:dc:4f:6d:e6:b0:09:39:86:62:f5:4f:10:c9:
9e:3a:15:4c:c1:21:cc:07:6d:9e:62:12:10:69:51:
f2:3d:0c:40:6a:25:5f:1c:8f:d2:ad:d9:85:9d:b2:
fc:0b:11:77:10:a5:6f:61:56:d3:58:c1:f7:ec:67:
55:c0:63:27:01:f9:30:2a:a6:10:9d:cc:d5:50:2a:
89:fa:cb:80:80:88:a8:20:e5:b8:53:ff:c7:bd:aa:
5a:13:26:b4:be:f8:04:db:01:6c:99:c8:bf:4c:6e:
2f:98:25:38:61:c4:cc:f2:42:31:36:12:58:ac:dc:
0f:50:de:a4:ac:cc:34:92:42:b1:f1:5a:c7:25:7b:
96:d6:ce:71:44:f7:71:38:02:f5:4c:1d:db:1c:f8:
26:eb:24:ce:96:cc:28:21:4f:e5:d3:f5:0f:63:f1:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:6D:0C:5A:C7:62:72:E1:17:EE:8F:33:B2:42:F9:EC:10:87:72
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:59:d1:b0:59:50:f6:ec:44:a7:bb:30:6f:c9:c0:f4:3d:
b2:21:15:3e:27:d4:ed:2b:3a:6d:53:06:a1:63:e1:45:db:8a:
74:6a:bc:ee:47:37:74:41:06:e2:10:70:55:f5:26:f6:c4:6c:
d1:3c:9f:40:d9:1d:1c:f2:e8:74:44:f6:a5:44:74:7f:f9:c3:
6f:3a:8c:e7:52:86:91:5c:5c:82:2b:8f:a3:d2:05:a2:61:8c:
17:dd:73:7a:6c:fc:3b:c3:f6:61:fc:2b:d8:44:7f:bf:ff:cd:
be:f7:e0:f5:a5:36:21:88:73:e0:23:59:b3:2d:d1:ce:60:a7:
ed:b4:a7:2c:d0:de:60:f6:91:c9:63:0d:ac:81:ba:39:15:e4:
23:24:06:87:7c:c7:6d:2d:cc:a4:2e:51:e1:ab:ce:48:12:b9:
5d:71:f4:70:46:73:e5:b5:a7:02:14:89:7e:c2:70:38:81:58:
85:0c:4c:01:d8:ee:f5:59:d5:12:4e:96:83:11:80:7c:c6:89:
c0:f1:9a:b3:8c:ba:19:2c:db:05:3d:d2:65:89:c8:a7:ab:b1:
4a:79:e0:ac:63:1f:81:cd:ef:ef:a0:12:91:ce:f7:53:7f:4e:
dd:a1:18:ce:99:42:d5:81:d4:74:61:93:d3:c6:89:fd:d7:b4:
6d:81:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:46 2026 by rpki-client