
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier: dnTe2Bu3MWjFw12X1rpNjVARYAMniIoO7WovXYbJ2Kc=
Subject key identifier: 30:46:6D:C0:22:5C:21:CF:68:9D:1D:37:F4:A8:FF:42:7A:0B:9D:0F
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer: /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial: 019E23C98AE2D2BD3BEC9596A0206A7ED876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number: 0558
Signing time: Thu 14 May 2026 00:01:11 +0000
Manifest this update: Thu 14 May 2026 00:01:11 +0000
Manifest next update: Fri 15 May 2026 00:01:11 +0000
Files and hashes: 1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: TPLLAOI7xrYMWYBh+GBL/O5PIADEOPVXRvb/RULr4Vo=)
2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:c9:8a:e2:d2:bd:3b:ec:95:96:a0:20:6a:7e:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Validity
Not Before: May 14 00:01:11 2026 GMT
Not After : May 15 00:01:11 2026 GMT
Subject: CN=30466dc0225c21cf689d1d37f4a8ff427a0b9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:71:aa:fb:6c:97:1d:b8:a9:69:9e:db:9d:
13:f6:cc:bd:47:cb:53:34:72:d5:44:0d:7f:45:1d:
05:f5:af:1b:c7:ee:c7:ec:cb:3d:a2:8a:f4:7c:a7:
e2:ac:8f:f4:18:b3:cd:2c:24:c5:9f:77:16:3a:18:
dc:43:1a:dd:0f:9b:5f:a8:9c:27:a8:9d:ec:60:ce:
8e:a2:69:26:d7:e2:3a:eb:ec:b9:d6:e6:de:65:09:
b7:f6:cf:f7:c2:c0:28:9b:30:83:9c:73:c0:50:67:
39:fa:d3:3b:41:c8:4e:2c:97:fc:92:f8:95:fa:52:
31:bf:69:16:e9:1b:30:32:6b:2e:df:5b:11:88:d3:
5d:2b:3f:c4:c4:46:5d:bc:c6:30:b8:e3:71:0b:b3:
a6:c8:5b:f6:0a:34:3a:08:ed:25:6c:32:94:f9:fa:
d2:3b:7b:bd:44:25:b2:0b:31:89:cd:dc:6c:23:57:
3f:82:0c:86:a9:10:ad:29:3c:45:d1:6e:da:64:ff:
7a:ba:32:98:1c:09:21:f4:2e:ec:60:8a:7a:49:04:
0c:f7:07:43:de:41:4d:b8:f8:48:a9:e9:95:91:28:
1e:1b:84:f8:ee:c2:aa:9c:68:dc:bd:0d:12:d3:6e:
05:85:28:a9:03:53:36:57:d5:26:8e:34:0b:a7:98:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:6D:C0:22:5C:21:CF:68:9D:1D:37:F4:A8:FF:42:7A:0B:9D:0F
X509v3 Authority Key Identifier:
keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:2f:0c:c4:96:2a:d2:64:7c:f4:cd:9a:0f:eb:35:2c:f0:
7b:f8:fc:fc:72:33:ce:28:6e:29:75:16:a4:e1:6b:57:a6:67:
e2:71:2b:31:8f:e8:9f:60:10:25:e4:e7:77:ae:cf:6c:75:24:
bc:14:f9:97:16:f4:81:2f:1d:60:7c:90:b0:42:80:a0:83:2f:
59:0b:01:a2:78:5f:0c:b1:aa:d4:e5:3b:14:1f:2c:61:b9:67:
f2:ca:e9:35:f4:d8:ee:07:39:c5:01:c6:fe:f5:b0:0b:e9:03:
f5:b4:66:78:df:79:d2:4d:0d:d9:dc:06:7b:3e:51:64:c9:9c:
fb:87:81:9e:45:73:b7:58:1e:61:68:b5:5b:ed:11:6b:fa:42:
73:ac:10:c7:34:a8:e8:de:c1:b4:f4:83:51:fd:b9:34:9f:c4:
f3:40:1c:ec:1e:b2:18:cd:e5:22:c5:02:fb:ae:a2:d7:cb:61:
c8:a6:81:c4:4d:2c:0d:e1:c1:8b:c0:30:b0:12:11:f6:3c:ce:
56:ce:94:bb:95:b3:12:40:a2:bd:d2:a0:17:95:f5:33:27:e4:
40:0f:25:33:5b:40:b1:96:85:d3:00:1c:54:1b:b5:0d:a3:52:
11:41:e9:0c:bb:74:99:ee:c6:d0:9b:67:aa:67:a9:16:73:ea:
8a:25:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 09:38:01 2026 by rpki-client