Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: UyuJ6XZL56oAd9PHNDfFQB/twLomD95c/M4YVCe1W3w=
Subject key identifier: 04:02:E5:A9:FD:7B:7E:B8:0B:5C:9A:CE:9F:DC:98:E7:43:61:69:65
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019E30A9CDB1739DD295735A84E480C02DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1254
Signing time: Sat 16 May 2026 12:01:34 +0000
Manifest this update: Sat 16 May 2026 12:01:34 +0000
Manifest next update: Sun 17 May 2026 12:01:34 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: PFJQohlvLerwd9/4LhJHGNNWeGnQ/r3v+zn5Js0jkHo=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:cd:b1:73:9d:d2:95:73:5a:84:e4:80:c0:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: May 16 12:01:34 2026 GMT
Not After : May 17 12:01:34 2026 GMT
Subject: CN=0402e5a9fd7b7eb80b5c9ace9fdc98e743616965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:71:75:cb:91:21:ec:d8:2f:29:f6:69:89:
20:c0:bd:67:84:11:0b:41:a4:d6:87:95:40:c8:4b:
a1:93:7f:66:df:38:95:15:42:2d:bc:0a:ee:55:ca:
b3:a8:c3:6b:5d:05:ed:27:24:96:f9:55:4e:2f:fc:
af:58:d6:45:f7:75:05:a7:c4:42:71:f9:39:d1:e1:
6e:e3:7f:3e:9c:ca:08:dc:a9:93:e0:90:1f:c3:e2:
fc:31:ec:d2:6e:35:71:16:73:25:d1:d7:5a:84:79:
83:7d:15:c3:14:cb:36:61:6e:17:5e:7f:a5:c5:46:
ed:43:1c:35:30:a7:47:2d:f9:54:e6:e0:b9:bf:13:
04:aa:ba:23:f6:1f:3f:91:6d:44:9c:b5:f1:d0:f3:
08:dd:77:fd:34:3d:a5:79:13:36:ce:05:5e:81:33:
f4:95:49:f8:a8:21:82:d6:96:50:5a:c9:27:79:ef:
c1:8e:51:49:60:02:45:41:ae:f4:a6:18:5d:86:b4:
88:ea:6f:b5:de:b3:9d:03:25:9d:7d:5a:ec:52:17:
2c:1e:c5:1b:51:eb:d3:e3:ea:66:33:17:de:70:fb:
d2:d5:6e:98:32:1c:37:9f:f3:5b:68:ed:87:56:81:
f8:39:a1:2b:4f:5a:02:cd:af:9c:69:6d:32:0c:ef:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:E5:A9:FD:7B:7E:B8:0B:5C:9A:CE:9F:DC:98:E7:43:61:69:65
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:16:6f:fe:75:5c:fe:e5:ee:e2:81:80:15:52:2f:ef:02:
b3:2c:85:28:12:0a:a8:26:4e:48:2e:ec:13:05:6c:48:46:85:
31:12:8a:74:b0:2f:4f:33:2d:f9:22:4f:63:2e:c5:0e:91:ac:
71:4c:a9:6e:3f:21:e5:68:60:98:c4:7e:07:59:fb:f5:fb:64:
e7:7a:1d:10:89:61:0d:d1:77:7e:c5:42:17:f2:8e:e7:2c:a3:
fd:c1:45:14:5e:08:fe:f7:d6:98:26:ce:3b:a6:1f:56:7f:12:
75:8b:11:72:fe:f1:2a:0e:f7:52:1e:ca:75:6e:50:5d:e2:d2:
de:ec:4c:31:ec:67:2e:46:dd:ea:d0:a3:ef:f6:2c:91:7d:6e:
0c:bd:c5:35:41:6b:30:ab:0d:48:b9:46:af:5a:d7:76:a0:11:
5a:90:80:48:8b:53:db:7c:6a:c0:a6:83:31:d5:29:00:5d:c7:
ef:b9:7f:04:57:c2:53:02:e2:9a:8a:28:ca:c1:16:95:f9:2c:
61:36:24:82:c1:10:42:fa:b1:b9:fc:c8:62:b4:1c:53:6a:a3:
97:c6:23:06:12:b2:20:fe:ea:61:ce:53:5a:c0:53:e0:71:34:
84:a1:e6:78:3e:d3:d2:26:bd:7e:e0:85:e5:73:4d:9c:5f:53:
dd:a3:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:04:03 2026 by rpki-client