Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: /ZcjqgTMnRPH/NYnAeZOSBPWHf9CerBYe9fwm7e0geY=
Subject key identifier: A9:B6:35:6A:9A:37:2F:D2:A6:0B:6C:81:2C:4C:2A:21:5D:89:7F:F9
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019E2C962DAAE4E721BA4CA948CC044E74F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1915
Signing time: Fri 15 May 2026 17:01:39 +0000
Manifest this update: Fri 15 May 2026 17:01:39 +0000
Manifest next update: Sat 16 May 2026 17:01:39 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: P7tE1quI79NWf93YkKmAwyBFuotIwdBgCCf9W9Ws/+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:96:2d:aa:e4:e7:21:ba:4c:a9:48:cc:04:4e:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: May 15 17:01:39 2026 GMT
Not After : May 16 17:01:39 2026 GMT
Subject: CN=a9b6356a9a372fd2a60b6c812c4c2a215d897ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:7d:94:b5:dd:f0:f4:e5:f4:67:66:99:e8:
f5:b3:df:37:0c:8a:93:9a:3a:97:af:b0:c6:5a:0b:
29:6d:9d:53:eb:e4:73:d2:af:65:27:50:55:89:a6:
7d:39:2b:c2:44:eb:8d:cc:c6:c0:1e:9f:f8:04:03:
41:df:eb:39:47:46:5e:58:3a:a7:00:4b:c9:cb:b7:
05:ec:12:98:14:c6:07:15:4a:5f:db:08:6f:8b:b2:
c3:4e:a6:1c:fa:3e:a9:70:89:6f:d3:c9:3e:dc:96:
f6:9f:17:45:33:cc:f0:58:37:34:1d:fa:27:a9:94:
08:8b:65:e6:97:8e:9b:4a:b1:87:26:cd:d3:f5:98:
c9:e5:a4:39:6c:f1:ce:79:b2:6c:b0:e4:ca:1c:08:
dd:3b:bd:25:b0:b6:17:5e:e8:ef:e4:a8:71:ee:d7:
77:e8:66:56:f7:ca:f3:c4:aa:8a:7c:81:f8:ec:04:
51:c5:27:0e:6b:6b:d7:22:13:11:21:b2:16:2f:a0:
68:04:29:81:22:d4:97:6d:f6:90:b0:d4:08:e0:31:
8d:98:0c:d4:c8:29:77:db:7c:0a:b7:d9:c2:c2:22:
db:84:e4:2e:eb:c0:9d:30:01:fc:39:2c:70:06:cb:
37:03:02:3a:8a:8a:c7:60:52:d7:2b:6a:94:00:5d:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:35:6A:9A:37:2F:D2:A6:0B:6C:81:2C:4C:2A:21:5D:89:7F:F9
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:a2:0b:3d:48:6c:f2:59:94:63:1b:87:a7:d2:a8:4b:8a:
1d:41:3d:dc:7f:f3:fd:41:ef:3f:2e:bf:58:5e:44:6c:01:78:
23:39:c2:cc:85:68:7a:ec:5e:00:41:ee:20:6b:e5:9b:36:3c:
ec:85:ed:c7:b9:6e:64:cc:33:33:49:81:20:3e:8b:ee:4e:cc:
61:cc:84:03:9b:e5:c1:97:ca:82:b3:a3:ba:a1:6c:7a:e1:eb:
89:90:fa:76:d6:8e:35:a5:73:c4:83:4f:07:58:f8:5d:56:5c:
4a:c9:60:e8:fe:de:e4:ff:ba:a6:2d:8c:74:bf:68:13:b6:27:
0e:ee:62:23:b9:ef:96:b0:35:c0:be:64:04:bd:4d:e5:17:55:
d5:40:52:18:b9:64:92:52:ab:f7:7b:d3:98:d1:d9:af:2d:39:
65:95:f5:fa:ea:49:c2:e1:53:8f:4c:a5:5f:6e:b9:66:68:b3:
d9:e6:7e:03:c7:58:27:8d:d3:28:b5:6b:16:49:50:08:0a:40:
a2:e8:92:7e:42:4d:6c:20:7d:ce:bf:e2:f0:8e:46:49:10:57:
39:71:0b:80:8f:86:8e:89:bc:3e:84:e9:fc:2f:04:af:bc:ba:
6e:5f:8c:7d:24:5c:2f:83:fe:15:6f:88:f6:97:f7:d1:4c:c4:
a6:a2:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:19 2026 by rpki-client