Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: LT0TBmBVkNfQMkhlNomf/HM6QW/ZwARM6EzDC2n6hvI=
Subject key identifier: 42:E5:6C:77:C7:41:66:74:00:8A:DA:0D:25:07:22:62:C3:44:78:FC
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 019E307232DD50AB1B474563DC1569E66D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 0AE5
Signing time: Sat 16 May 2026 11:00:50 +0000
Manifest this update: Sat 16 May 2026 11:00:50 +0000
Manifest next update: Sun 17 May 2026 11:00:50 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: ymq4w3xaFaOPfBujeokTtBFludPnENU5MhZxvqJhRG8=)
2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:32:dd:50:ab:1b:47:45:63:dc:15:69:e6:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: May 16 11:00:50 2026 GMT
Not After : May 17 11:00:50 2026 GMT
Subject: CN=42e56c77c7416674008ada0d25072262c34478fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:ad:2d:04:f1:cf:9e:42:7b:c7:4d:2c:ad:
9e:bd:d0:bb:49:ea:42:d6:e1:df:aa:33:d2:da:26:
58:7a:3c:3b:76:30:5c:42:1f:7b:23:9a:87:3c:c3:
f8:2d:51:66:91:c4:0f:99:4d:cb:f6:52:1f:8c:18:
05:8d:e8:96:36:80:cc:f2:70:92:6a:97:43:2a:eb:
b4:b9:7e:8c:64:c4:62:ce:4e:71:2e:a6:97:ba:3c:
a3:ef:6c:3e:05:91:d2:13:31:46:61:2a:56:3a:7f:
c2:7c:8c:b6:7a:a3:ca:3a:8d:83:69:8c:ec:ad:44:
1e:d6:19:96:6f:da:fc:3a:b1:77:44:d6:e5:39:3f:
d2:4e:61:b8:27:f6:b2:bf:73:bc:51:09:ea:95:b1:
27:3c:3d:f3:44:d8:a7:a2:1c:b7:ca:b9:8c:a8:ec:
63:eb:67:b8:92:66:eb:67:ae:43:9d:cd:64:a3:1f:
d2:92:bf:2d:07:09:10:2b:78:4f:4f:22:70:93:43:
1b:30:f5:87:bf:f5:06:db:f7:5d:75:2d:ca:95:f6:
5d:6a:4a:d1:b9:6d:ae:a0:65:95:d3:16:ee:e7:6d:
02:2a:74:14:b2:3d:7d:7b:64:03:78:77:10:30:83:
53:02:b1:ae:f3:54:c0:66:a2:6e:9a:01:c6:81:17:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:6C:77:C7:41:66:74:00:8A:DA:0D:25:07:22:62:C3:44:78:FC
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:47:74:6b:be:2e:b0:80:cf:7a:1c:b5:7b:ec:f9:a2:64:
bc:b0:2a:7f:92:81:ea:3f:d9:87:1e:d2:21:c2:a4:eb:80:9c:
f1:4f:59:bf:93:0e:41:83:6d:8d:dd:d2:16:fb:16:ec:94:9a:
75:d8:05:d7:ac:44:fa:73:55:76:7a:98:3f:60:c1:f4:5e:ff:
3e:68:98:f4:9e:3e:ce:33:5c:70:2e:e2:60:f7:cf:ca:96:f0:
0a:d7:7f:df:c8:a8:50:90:a2:46:1f:d3:2a:57:84:f2:ac:3e:
3f:e0:75:bc:21:ab:70:88:08:1e:a7:39:e2:e4:69:c2:42:27:
05:87:1d:3b:5a:da:8d:b5:d1:d1:b2:94:6f:44:f5:8e:15:dc:
09:0c:9e:f5:fe:f0:35:e1:54:73:30:f8:6c:92:fe:8a:0c:b2:
4d:71:34:74:8e:b6:0b:ca:46:10:02:15:17:a4:0a:79:24:f1:
38:6c:a0:2b:49:ec:93:e0:cf:ed:82:30:e1:23:82:d8:21:79:
86:36:d0:99:f0:42:a5:69:5d:ac:25:06:e3:4d:25:e4:75:c3:
bb:24:14:f1:72:d0:d3:f4:12:a7:82:b5:af:35:8f:7e:4d:e3:
e5:bd:40:58:ea:5a:ef:08:41:8c:5d:40:a3:99:8a:be:e0:01:
9b:5e:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:03 2026 by rpki-client