Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: Fi3RS/d/n37yR6h0shxrBpwJdXyiX69vmXE/7phZPTs=
Subject key identifier: 43:2C:7E:02:A1:8E:0C:01:17:85:FB:B8:9D:8D:13:08:07:B3:FE:C0
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019E314E133018FA96E352183E3FCC7559A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 18A5
Signing time: Sat 16 May 2026 15:01:00 +0000
Manifest this update: Sat 16 May 2026 15:01:00 +0000
Manifest next update: Sun 17 May 2026 15:01:00 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: lnzgkV4AyxwfS4n4PBBbVufnGPitkWLmp9efV8hJaVA=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:13:30:18:fa:96:e3:52:18:3e:3f:cc:75:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: May 16 15:01:00 2026 GMT
Not After : May 17 15:01:00 2026 GMT
Subject: CN=432c7e02a18e0c011785fbb89d8d130807b3fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:89:7d:b5:15:1b:e7:b5:af:43:d8:81:3c:
ec:fc:80:7b:ef:b2:52:7e:78:7c:c7:c3:d7:90:6c:
9d:78:7c:f9:68:d2:a2:02:12:a0:58:5e:af:41:9d:
5f:1f:40:af:13:3f:e4:77:81:69:eb:04:f8:c9:8f:
ef:c3:41:65:b9:96:15:85:27:55:a9:18:39:bc:e2:
d6:f3:cc:7b:97:db:63:4d:9e:a7:75:c3:8d:04:bd:
3c:13:15:fc:c2:59:a4:5a:e7:ae:33:68:64:fa:f9:
4e:e2:4d:5f:2f:6e:2f:84:ab:4b:ca:41:8e:ce:ac:
d2:1c:06:96:ab:18:18:b8:68:cf:11:34:54:f3:56:
a4:b5:bd:52:74:09:fd:15:1f:8a:f5:00:31:3d:34:
85:9a:c6:b3:3e:4a:04:81:7e:9f:62:19:52:54:81:
0e:df:55:5e:e1:96:4d:f6:26:a0:cd:14:57:71:ec:
93:f2:2e:63:24:3d:e9:ef:e9:a2:96:cd:76:a4:be:
05:d9:c6:0d:b7:94:b0:10:fa:ec:3f:fd:7f:b3:86:
a0:31:07:29:f1:dc:cd:11:4f:48:60:ec:f1:d4:b7:
76:d0:9a:0f:ed:74:b4:3c:f5:ff:75:97:7a:44:15:
f7:15:ed:8a:63:81:b7:c6:b7:10:80:c6:73:85:09:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:7E:02:A1:8E:0C:01:17:85:FB:B8:9D:8D:13:08:07:B3:FE:C0
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:8b:53:5b:91:d9:83:05:4a:2e:f3:af:ff:ab:58:e1:89:
0f:91:e8:c0:92:c0:2f:bd:f5:c4:ee:65:92:bc:8f:d9:76:54:
97:47:26:8a:83:2f:64:80:64:75:b4:29:1f:eb:e9:c8:1e:8f:
52:2d:10:22:6e:24:f9:b3:35:37:5c:2c:03:0d:2a:73:89:82:
2b:bb:e2:be:c5:60:e3:d5:b4:85:9a:f3:38:14:f8:ac:79:06:
6f:56:6c:fc:25:38:2d:24:8f:c6:97:1c:5c:ec:48:10:07:91:
a2:f3:0f:ec:37:e9:43:5a:3b:8e:21:29:16:d4:cd:f6:aa:28:
d9:d4:0f:e8:44:43:75:9c:85:dc:80:d4:89:d2:92:b6:a6:f1:
3c:bd:2d:a7:ba:e0:ee:ac:ad:92:78:6e:e6:55:43:fd:97:ba:
3d:48:98:c5:f0:65:44:fc:36:98:7f:58:b7:25:d7:e9:ca:f6:
0d:4b:c3:eb:57:b3:9f:fb:43:1b:dc:f4:54:d7:29:0f:0e:7d:
52:35:79:ae:a3:a6:97:1d:a8:a7:83:06:10:94:ec:45:3c:60:
a2:a5:e5:a8:22:93:f8:4a:7c:34:84:5a:88:22:16:fa:85:bc:
f2:9a:1b:09:0d:a6:c8:61:7f:66:67:0f:ab:db:7e:f2:31:04:
6a:26:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:21 2026 by rpki-client