Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: Fjijgry4L6HCV0fzcgu0I0N943uSlZg6P6HTSCd41es=
Subject key identifier: 88:3D:55:64:FD:A3:86:34:36:4D:B8:FD:9D:FE:6E:C7:77:03:1C:59
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019E3072987CAA561B44E6DA74AEC7EFE049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0828
Signing time: Sat 16 May 2026 11:01:16 +0000
Manifest this update: Sat 16 May 2026 11:01:16 +0000
Manifest next update: Sun 17 May 2026 11:01:16 +0000
Files and hashes: 1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: hKGYRExi4sm+iPZiELJCFhdDuwzbExSSAREAgeVWWUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:98:7c:aa:56:1b:44:e6:da:74:ae:c7:ef:e0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: May 16 11:01:16 2026 GMT
Not After : May 17 11:01:16 2026 GMT
Subject: CN=883d5564fda38634364db8fd9dfe6ec777031c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:0a:c4:f7:12:02:93:a2:42:cd:84:f9:0f:
ac:0b:25:f8:14:84:76:08:5b:04:15:79:d2:89:f1:
a7:9b:4f:8e:4e:6d:9c:c6:66:77:cd:47:cd:7d:53:
e6:7b:17:a9:df:b2:38:1a:13:99:56:a6:18:73:34:
4d:4e:95:fa:d5:f9:bf:45:74:1b:75:8f:d7:21:d3:
35:1d:3b:5c:52:0e:e0:cd:aa:08:5b:11:9a:78:ad:
3e:a3:78:5a:0c:c7:30:43:4b:cb:1a:f2:c6:ce:51:
99:c6:ef:4f:ab:12:e8:83:3c:85:0a:39:40:d4:ab:
08:d9:2d:94:04:0b:c4:58:48:a5:03:f1:8f:54:bd:
6c:78:90:28:7c:cc:0e:73:60:2e:59:88:32:d2:19:
fe:c2:28:98:30:b6:e9:de:18:4c:f2:b1:4c:e4:63:
10:54:25:59:44:87:80:3f:e4:0c:56:08:ca:d8:81:
16:9f:0e:87:97:9a:23:59:2f:ec:7e:c2:4a:82:77:
bd:64:15:a9:60:5d:3b:2d:ad:4a:3b:65:f4:19:17:
a3:a9:53:e3:26:b8:a8:fe:30:35:58:b2:09:41:a8:
f6:b2:45:04:26:f9:73:95:00:54:61:cd:1c:4e:f6:
d0:44:f6:10:0b:d3:bd:d7:5c:75:16:b9:aa:cc:b7:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:55:64:FD:A3:86:34:36:4D:B8:FD:9D:FE:6E:C7:77:03:1C:59
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c9:71:c5:5d:65:c2:d8:e3:59:f6:8e:3d:8c:48:05:34:6a:
62:23:34:d7:14:8f:40:da:30:28:32:4c:2c:89:fb:cc:3d:bd:
f0:49:e6:0d:39:6a:6f:86:23:a9:65:ed:d0:84:3e:66:82:f2:
02:7c:f5:0d:86:c9:8f:76:a3:85:e1:a2:7d:d0:2d:58:18:06:
c8:ad:3d:2f:6c:68:d0:ee:a1:65:17:15:16:a2:ea:2f:0f:3e:
42:b9:6c:97:25:fb:a3:36:db:57:fc:72:54:66:df:32:cb:47:
90:2d:49:29:50:96:0e:e1:54:fe:b6:7f:4d:0d:03:2b:fa:3b:
95:ed:cd:21:54:79:8b:e7:5b:1c:e5:8d:a1:49:b4:8a:ed:bf:
fe:31:cf:34:d7:c4:2a:04:82:46:de:67:2f:6f:db:46:8d:9b:
bc:81:b6:7c:63:6d:15:b5:ef:f2:6e:d8:e5:8b:98:99:31:d5:
70:9d:eb:2e:05:da:c8:4f:23:ca:fb:ba:63:0a:0d:cb:96:44:
28:05:d9:c1:01:fb:2c:a9:8b:6b:3a:11:8c:79:29:60:7b:65:
84:ee:d1:0a:67:16:84:9d:b3:80:3f:ce:c2:8b:ee:23:78:13:
68:e1:da:92:9f:e6:26:a4:ae:bc:0d:b2:87:c9:3f:26:d3:76:
6a:50:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:19 2026 by rpki-client