Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: wM/NoJ74TVkmKkqA9U+ziQeSbq5RDeioy5VGvbKWSUI=
Subject key identifier: 4F:EF:CA:D1:16:FC:97:DD:F7:B8:97:C9:A8:FA:AB:E4:95:51:C6:A1
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019E28EFB815712693B3F3F326BF1201C9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 191E
Signing time: Fri 15 May 2026 00:00:59 +0000
Manifest this update: Fri 15 May 2026 00:00:59 +0000
Manifest next update: Sat 16 May 2026 00:00:59 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: aFYsfDUHHluFq5kDcoG6sTIYzFuXgKv8OnfkAmZOrxE=)
3: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=)
4: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: fhRyE_K269sQWrdJhqkhEA-v5ko.asa (hash: 9+eBnbSBimBu4HwMZ224XRHi7r8hcPQzKz3/KA+alHc=)
7: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:b8:15:71:26:93:b3:f3:f3:26:bf:12:01:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: May 15 00:00:59 2026 GMT
Not After : May 16 00:00:59 2026 GMT
Subject: CN=4fefcad116fc97ddf7b897c9a8faabe49551c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:bf:8d:e4:a4:a9:ab:b8:63:fa:43:cd:39:
90:b3:5c:15:c0:1f:3a:04:a2:d9:68:dd:b6:29:a4:
7c:8f:db:d0:97:cf:9e:d8:c5:ee:c9:fe:a2:3b:08:
ed:5a:cd:5a:3e:3f:58:26:a1:e0:35:c6:43:8f:56:
27:c0:a2:dc:21:36:96:13:a6:7b:36:5c:9d:f4:a5:
77:1d:a0:18:53:29:6a:30:e4:ce:a4:08:4f:60:c7:
e7:79:36:27:78:09:58:cb:ab:1d:f6:a2:33:a5:be:
59:2e:16:f0:a6:6f:2c:33:ad:9c:30:4c:8e:35:62:
a6:7d:82:25:90:26:47:99:3e:a2:73:ff:1b:a1:41:
32:f9:be:46:3f:d2:b5:63:07:3d:31:fa:68:7d:cf:
39:ae:3f:ac:0f:b1:02:36:94:ea:37:17:9a:7c:b7:
01:ea:a2:c0:b6:7e:3e:80:92:86:87:d0:18:7d:5a:
80:aa:78:4e:ef:30:92:a9:5f:05:fb:1a:74:05:77:
fd:f3:20:57:ce:0b:6a:f4:2e:49:8e:20:c3:a0:03:
e2:b4:12:42:70:cc:ca:d8:65:dc:fa:94:62:de:f0:
03:a0:f2:12:f8:bb:5c:66:65:4f:21:74:67:28:57:
0d:53:20:d2:db:c5:cc:ab:91:29:80:ed:df:36:37:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:CA:D1:16:FC:97:DD:F7:B8:97:C9:A8:FA:AB:E4:95:51:C6:A1
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:23:c9:2c:51:e5:4d:de:e5:15:49:66:8d:f1:0d:3e:89:ff:
0f:aa:40:45:4d:71:4d:08:54:f9:70:ab:82:d0:87:3b:25:cc:
82:b8:00:55:43:fa:58:89:53:c3:5c:0a:a2:2e:6f:eb:f4:00:
ff:b5:66:99:3d:5e:24:95:ad:4b:9e:66:92:e3:fc:82:89:57:
b8:47:4d:dc:61:8c:72:24:85:39:86:c3:8b:06:b8:23:2d:9c:
d9:ec:97:c5:b7:2b:1c:fc:6b:63:e7:9f:fd:d3:08:94:b5:7d:
cc:7d:2d:b3:df:4e:40:9f:57:83:69:b2:b8:70:07:5c:b3:7c:
70:fb:61:08:4b:fd:66:39:59:ee:af:ff:f4:a9:f4:f2:d5:aa:
aa:f0:ab:cb:29:1c:a4:5a:45:8d:f5:28:e9:39:fa:38:fb:ba:
43:db:31:59:60:98:1d:88:44:53:b6:66:7e:ba:0e:5b:6e:d2:
64:d4:25:79:58:9c:f2:c2:83:48:01:e5:b5:f9:1e:b7:0a:42:
dc:36:16:07:67:41:32:4d:a6:92:78:18:be:0b:f2:ef:9e:d5:
5c:4b:ff:b8:9e:59:22:bc:75:7a:c8:68:59:19:d5:cd:23:84:
7e:50:33:a5:a1:7d:c9:44:75:d9:4a:bd:33:64:a6:a9:6e:66:
bb:e1:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:53 2026 by rpki-client