Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: RaZwJW8eJx06f4ulI33tC9rTckLacgmq1VchBhMHaa0=
Subject key identifier: 5F:E0:F0:48:BF:FA:0D:D5:27:0D:19:C8:A3:70:7B:A1:90:F5:88:E3
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 019E30A911605070D26FD81014F7E04DC69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 12:00:46 +0000
Manifest this update: Sat 16 May 2026 12:00:46 +0000
Manifest next update: Sun 17 May 2026 12:00:46 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: j0/xPjcHEU7VMo1Yw25N0OfbwFiurJ+daBgfGSCpuS0=)
2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:11:60:50:70:d2:6f:d8:10:14:f7:e0:4d:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: May 16 12:00:46 2026 GMT
Not After : May 17 12:00:46 2026 GMT
Subject: CN=5fe0f048bffa0dd5270d19c8a3707ba190f588e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:68:38:6c:43:ba:46:5a:b5:c0:20:9f:e6:
99:49:35:aa:ab:37:95:a8:a5:0e:b5:ab:1f:e3:9e:
43:79:6f:50:04:09:78:a6:44:60:a2:1f:1b:c3:d1:
13:59:bd:42:b4:0f:e6:e8:5e:69:44:c7:28:5d:b6:
89:72:22:c7:3a:26:68:5e:58:8b:6f:70:b5:0e:38:
e5:3b:55:e5:cf:6c:66:17:90:6d:9a:e1:11:dc:6a:
3f:00:24:a7:55:ca:ae:79:fc:57:d7:d2:07:f4:81:
9f:e8:42:09:ae:72:86:f9:9b:73:65:1c:cf:75:2f:
93:85:34:5c:2f:09:1e:1b:57:71:1d:00:1c:67:70:
1b:66:d9:27:e5:41:d7:49:5d:c2:ab:01:c0:0e:11:
5b:62:b7:0f:68:d0:07:0c:d2:cb:b3:2f:63:ea:fb:
ad:57:e3:3a:0c:8e:42:e9:54:2b:db:54:17:83:75:
ed:fe:7a:c9:66:45:76:c8:2e:ee:4a:21:bc:e8:f6:
f4:41:49:c5:cd:58:5a:5c:b9:e8:c2:c3:42:8f:2a:
f9:74:fa:0c:df:93:e6:e0:25:2a:9d:fe:31:5e:e9:
a7:3a:7a:e7:a3:63:c4:c2:a7:d9:3e:f8:01:86:b5:
92:35:af:89:8b:3b:f7:c9:d5:29:c2:31:d0:99:0b:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E0:F0:48:BF:FA:0D:D5:27:0D:19:C8:A3:70:7B:A1:90:F5:88:E3
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:30:68:8d:43:50:9f:78:ee:69:09:af:c6:0e:88:69:83:d9:
2f:d2:e4:5c:ab:71:98:3c:b6:17:fd:f2:97:92:20:12:7a:cf:
7b:40:db:9a:12:14:41:80:ac:62:f9:5e:2a:bc:a4:4c:2e:a6:
94:03:f4:84:66:73:3f:8c:f7:38:cc:fa:0a:66:d5:64:3b:e1:
86:00:c4:f6:96:5d:ae:d5:e0:0c:e6:0a:3e:c5:45:d3:7f:0e:
51:86:e6:a3:3f:d0:81:6a:04:07:5e:b0:0d:a6:48:8a:b7:ca:
23:6a:4f:d0:85:1a:0a:35:0a:ba:a1:a8:ba:ce:77:5e:0d:2a:
e0:78:74:bc:6c:40:bb:50:74:26:9a:23:cd:a8:b3:c8:e0:90:
2d:eb:f7:14:01:db:2d:1a:25:54:18:99:39:a7:ab:76:4d:94:
96:a4:46:f1:f9:46:12:63:fd:13:5a:7d:f3:7e:d5:34:c7:62:
57:27:92:6f:a9:b7:16:d3:b1:37:37:67:6f:73:37:80:94:2f:
f4:f6:3a:4d:3c:58:54:c0:2c:95:3a:ca:92:00:1b:1f:0f:f8:
34:cb:31:2f:bd:cf:09:30:62:38:91:63:34:a8:44:28:63:5f:
4d:74:50:eb:15:f4:4c:16:64:11:fc:cf:5a:7e:35:b9:71:4b:
90:f8:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:02 2026 by rpki-client